agentprime: cloud-foundry-cf-deploymentEvery new CVE for cloud-foundry-cf-deployment.https://agentprime.io/CVE-2026-59387: Broken access control restriction in Cloud Controller APIhttps://agentprime.io/advisories/CVE-2026-59387/https://agentprime.io/advisories/CVE-2026-59387/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:47:59 GMTCVECVE-2026-59385: Space Developer can extract space-scoped broker credentialshttps://agentprime.io/advisories/CVE-2026-59385/https://agentprime.io/advisories/CVE-2026-59385/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:44:45 GMTCVECVE-2026-59386: Credential exposure to space supporterhttps://agentprime.io/advisories/CVE-2026-59386/https://agentprime.io/advisories/CVE-2026-59386/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:35:20 GMTCVECVE-2026-59396: DoS Vulnerability in UAA Related to JWKS URI Handlinghttps://agentprime.io/advisories/CVE-2026-59396/https://agentprime.io/advisories/CVE-2026-59396/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:24:47 GMTCVECVE-2026-59357: Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessionshttps://agentprime.io/advisories/CVE-2026-59357/https://agentprime.io/advisories/CVE-2026-59357/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 07:06:18 GMTCVECVE-2026-59358: UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant typehttps://agentprime.io/advisories/CVE-2026-59358/https://agentprime.io/advisories/CVE-2026-59358/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 06:54:10 GMTCVECVE-2026-59335: Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromisehttps://agentprime.io/advisories/CVE-2026-59335/https://agentprime.io/advisories/CVE-2026-59335/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 11:05:11 GMTCVECVE-2026-41005: UAA accepts SAML Encrypted Assertions authentication bypasshttps://agentprime.io/advisories/CVE-2026-41005/https://agentprime.io/advisories/CVE-2026-41005/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 20:03:22 GMTCVEcriticalCVE-2025-22246: CVE-2025-22246 – UAA Private Key Exposurehttps://agentprime.io/advisories/CVE-2025-22246/https://agentprime.io/advisories/CVE-2025-22246/CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 05:14:40 GMTCVECVE-2023-34061: CVE-2023-34061 – Gorouter route pruninghttps://agentprime.io/advisories/CVE-2023-34061/https://agentprime.io/advisories/CVE-2023-34061/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jan 2024 07:01:49 GMTCVECVE-2023-34041: CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouterhttps://agentprime.io/advisories/CVE-2023-34041/https://agentprime.io/advisories/CVE-2023-34041/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Sep 2023 07:22:00 GMTCVECVE-2020-5423: Cloud Controller is vulnerable to denial of service via YAML parsinghttps://agentprime.io/advisories/CVE-2020-5423/https://agentprime.io/advisories/CVE-2020-5423/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Dec 2020 01:55:11 GMTCVECVE-2020-5420: Gorouter is vulnerable to DoS attack via invalid HTTP responseshttps://agentprime.io/advisories/CVE-2020-5420/https://agentprime.io/advisories/CVE-2020-5420/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2020 01:10:16 GMTCVECVE-2020-5418: Cloud Controller allows users with no roles to list dropletshttps://agentprime.io/advisories/CVE-2020-5418/https://agentprime.io/advisories/CVE-2020-5418/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2020 01:10:15 GMTCVECVE-2020-5417: Cloud Controller may allow developers to claim sensitive routeshttps://agentprime.io/advisories/CVE-2020-5417/https://agentprime.io/advisories/CVE-2020-5417/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2020 21:50:14 GMTCVECVE-2020-5416: CF clusters with NGINX in front of them may be vulnerable to DoShttps://agentprime.io/advisories/CVE-2020-5416/https://agentprime.io/advisories/CVE-2020-5416/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2020 21:50:14 GMTCVECVE-2019-11283: Password leak in smbdriver logshttps://agentprime.io/advisories/CVE-2019-11283/https://agentprime.io/advisories/CVE-2019-11283/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Oct 2019 15:32:22 GMTCVECVE-2019-11282: UAA is vulnerable to a Blind SCIM injection leading to information disclosurehttps://agentprime.io/advisories/CVE-2019-11282/https://agentprime.io/advisories/CVE-2019-11282/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Oct 2019 15:28:24 GMTCVECVE-2019-11277: Volume Services is vulnerable to an LDAP injection attackhttps://agentprime.io/advisories/CVE-2019-11277/https://agentprime.io/advisories/CVE-2019-11277/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Sep 2019 17:40:18 GMTCVECVE-2019-3801: Java Projects using HTTP to fetch dependencieshttps://agentprime.io/advisories/CVE-2019-3801/https://agentprime.io/advisories/CVE-2019-3801/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Apr 2019 20:17:37 GMTCVE