Product by Cloud Foundry
Uaa Release (oss)
10 known vulnerabilities in Uaa Release (oss) (Cloud Foundry), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-11278 | Privilege Escalation via Blind SCIM Injection in UAA | 8.7 | |
| High | CVE-2019-11279 | Privilege Escalation via Scope Manipulation in UAA | 8.7 | |
| High | CVE-2019-3787 | UAA defaults email address to an insecure domain | 8.3 | |
| High | CVE-2019-11270 | UAA clients.write vulnerability | 7.3 | |
| High | CVE-2019-3788 | UAA redirect-uri allows wildcard in the subdomain | 8.7 | |
| Medium | CVE-2019-3794 | UAA - Login app subject to clickjacking attack | 6.5 | |
| Medium | CVE-2019-11268 | UAA SQL Identity Zone Vulnerability | 6.5 | |
| High | CVE-2019-3775 | UAA allows users to modify their own email address | 7.1 | |
| Critical | CVE-2019-3801 | Java Projects using HTTP to fetch dependencies | 8.7 | |
| Medium | CVE-2019-11274 | UAA SCIM Filter XSS | 4.3 |