Product by Cloud Foundry
Cloud Foundry UAA Release (OSS)
8 known vulnerabilities in Cloud Foundry UAA Release (OSS) (Cloud Foundry), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-11279 | Privilege Escalation via Scope Manipulation in UAA | 8.7 | |
| High | CVE-2016-0732 | Pivotal Elastic Runtime: Privilege Escalation | 8.8 | |
| High | CVE-2019-3788 | UAA redirect-uri allows wildcard in the subdomain | 8.7 | |
| High | CVE-2019-3775 | UAA allows users to modify their own email address | 7.1 | |
| Critical | CVE-2019-3801 | Java Projects using HTTP to fetch dependencies | 8.7 | |
| Medium | CVE-2017-8031 | Cloud Foundry cf-release: Denial of Service | 5.3 | |
| Medium | CVE-2026-22723 | UAA User Token Revocation logic error | 6.5 | |
| High | CVE-2025-22246 | Cloud Foundry UAA: security vulnerability | 3.0 |