Cloud Foundry Notifications

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-20885 Jun 16, 13:15 MEDIUM This Month

Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.1.19; cf-nfs-volume release: 5.0.X versions prior to 5.0.27, 7.1.X versions prior. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Cloud Foundry Nfs Volume Cloud Foundry Notifications Cloud Foundry Smb Volume Pivotal

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2019-3800 Aug 05, 17:15 HIGH This Week

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure PostgreSQL Google IBM Microsoft +60

NVD

CVSS 3.0

7.8

EPSS

2.1%

CVE-2023-20885

EPSS 1% CVSS 6.5

MEDIUM This Month

Information Disclosure Cloud Foundry Nfs Volume Cloud Foundry Notifications +2

NVD

CVE-2019-3800

EPSS 2% CVSS 7.8

HIGH This Week

Information Disclosure PostgreSQL Google +62

NVD