CVE-2018-15755

MEDIUM · CVSS 6.6 EPSS 1.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-10-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-15755

Severity

MEDIUM

CVSS

6.6

EPSS

1.28%

Original NVD Description

Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.