Critical severity9.8OSV Advisory· Published Jun 13, 2017· Updated Jun 17, 2026

CVE-2016-6655

Description

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cloudfoundry/Cf Mysql ReleaseOSV3 versions
-, list, log, …+ 2 more
- (no CPE)range: -, list, log, …
- cpe:2.3:a:cloudfoundry:cf-mysql-release:*:*:*:*:*:*:*:*range: <=30
- (no CPE)range: <v31
Cloudfoundry/Cf Release
cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*
Range: <=244
Cloudfoundry/Cloud Foundryllm-create
Range: <v245

Patches

Vulnerability mechanics

References

www.cloudfoundry.org/cve-2016-6655/nvdPatchVendor Advisory
www.securityfocus.com/bid/93889nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000