Cloudfoundry Loggregator vulnerabilities

2 CVEs affecting Cloudfoundry Loggregator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1269, published 2018-06-06.

More from Cloudfoundry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1269, published 2018-06-06. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing…
• CVE-2018-1268, published 2018-06-06. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not validate app GUID structure in requests. A…