CVE-2016-0928

7.4 highEPSS 1.4%

High (7.4) in pivotal cloud foundry elastic runtime. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Severity

CVSS 3.0

7.4 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2016-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal:cloud_foundry_elastic_runtime

References

http://www.securityfocus.com/bid/91550
https://pivotal.io/security/cve-2016-0928
http://www.securityfocus.com/bid/91550
https://pivotal.io/security/cve-2016-0928

Check your stack JSON