CVE-2016-0926

6.1 mediumEPSS 1.1%

Medium (6.1) in pivotal software cloud foundry elastic runtime. EPSS 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or HTML via unspecified input that improperly interacts with the AngularJS framework.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2016-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:cloud_foundry_elastic_runtime

References

http://www.securityfocus.com/bid/91677
https://pivotal.io/security/cve-2016-0926
http://www.securityfocus.com/bid/91677
https://pivotal.io/security/cve-2016-0926

Check your stack JSON