CVE-2016-9880

9.8 criticalEPSS 2.0%

The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2018-03-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:gemfire_for_pivotal_cloud_foundry

References

http://www.securityfocus.com/bid/96146
https://pivotal.io/security/cve-2016-9880
http://www.securityfocus.com/bid/96146
https://pivotal.io/security/cve-2016-9880

Check your stack JSON