Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-0780

25
FAUCET Score

CVE-2016-0780 describes a disk quota enforcement bypass vulnerability affecting cf-release v231 and earlier, and specific versions of Pivotal Cloud Foundry Elastic Runtime (1.5.x prior to 1.5.17 and 1.6.x prior to 1.6.18). An attacker could exploit this flaw by providing an improper disk quota value, allowing them to consume all available disk space on DEAs/CELLs. This could lead to a denial of service for other applications running on the affected platform. The vulnerability has a CVSS v3.1 score of 7.5 (HIGH), indicating a network-based attack with low complexity and no user interaction required, resulting in a high impact on availability. While the EPSS score is low, suggesting a low probability of exploitation, the FAUCET Risk Score is 50/100. There is no evidence of active exploitation, nor is exploit code available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting it is not a widely recognized or actively targeted threat.

Impacted Technologies

VendorProductVersion(s)CPE
231CPE matchmatch criteria
cpe:2.3:a:cloudfoundry:cf-release:231:*:*:*:*:*:*:*
1.5.0CPE matchmatch criteria
cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.0:*:*:*:*:*:*:*
1.5.1CPE matchmatch criteria
cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.1:*:*:*:*:*:*:*
1.5.2CPE matchmatch criteria
cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.2:*:*:*:*:*:*:*
1.5.3CPE matchmatch criteria
cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.3:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.24%
Probability of exploitation in next 30 days
EPSS Percentile
66.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0124 is in the 41st percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

pivotal.io / security/cve-2016-0780
Vendor Advisory