CVE-2016-6655

9.8 criticalEPSS 3.4%

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2017-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudfoundry:cf-mysql-release
cloudfoundry:cf-release

References

http://www.securityfocus.com/bid/93889
https://www.cloudfoundry.org/cve-2016-6655/
http://www.securityfocus.com/bid/93889
https://www.cloudfoundry.org/cve-2016-6655/

Check your stack JSON