Vendor
Pivotal
86 known vulnerabilities in products by Pivotal, 0 of them actively exploited (CISA KEV).
Key figures
86
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
12
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-8046 | Pivotal Spring Data REST and Spring Boot: security vulnerability | 9.8 | |
| High | CVE-2016-4977 | Pivotal Spring Security OAuth: Remote Code Execution | 8.8 | |
| Critical | CVE-2018-1260 | Pivotal Spring Security OAuth: Remote Code Execution | 9.8 | |
| High | CVE-2017-3203 | Pivotal/Spring Spring-flex: Deserialization of Untrusted Data | 8.1 | |
| High | CVE-2018-15756 | DoS Attack via Range Requests | 7.5 | |
| High | CVE-2018-1259 | Pivotal Spring Data Commons: XML External Entity (XXE) | 7.5 | |
| Critical | CVE-2018-15758 | Privilege Escalation in spring-security-oauth2 | 9.6 | |
| High | CVE-2018-1258 | Pivotal Spring Framework: security vulnerability | 8.8 | |
| High | CVE-2018-11040 | Pivotal Spring Framework: security vulnerability | 7.5 | |
| Critical | CVE-2014-3527 | Pivotal Spring Security: security vulnerability | 9.8 | |
| High | CVE-2016-5007 | Pivotal Spring Security: security vulnerability | 7.5 | |
| Critical | CVE-2016-0761 | Pivotal Cloud Foundry: security vulnerability | 9.8 | |
| Critical | CVE-2018-15759 | On Demand Services SDK Timing Attack Vulnerability | 9.1 | |
| Medium | CVE-2018-1257 | Pivotal Spring Framework: Denial of Service | 6.5 | |
| High | CVE-2018-1279 | RabbitMQ cluster compromise due to deterministically generated cookie | 8.5 | |
| Critical | CVE-2019-3777 | Apps Manager unverified SSL certs in Cloud Controller proxy | 8.0 | |
| High | CVE-2018-1280 | Pivotal Greenplum Command Center: SQL Injection | 7.5 | |
| High | CVE-2019-19023 | Harbor: Privilege Escalation | 8.8 | |
| High | CVE-2019-19029 | Harbor: SQL Injection | 7.2 | |
| High | CVE-2019-11287 | RabbitMQ Web Management Plugin DoS via heap overflow | 4.5 | |
| Medium | CVE-2018-11039 | Pivotal Spring Framework: Cross-Site Scripting (XSS) | 5.9 | |
| High | CVE-2014-0225 | Pivotal Spring Framework: XML External Entity (XXE) | 8.8 | |
| High | CVE-2019-11280 | Privilege escalation through the invitations service | 8.8 | |
| High | CVE-2018-1256 | Pivotal Spring Cloud SSO Connector: security vulnerability | 8.1 | |
| High | CVE-2016-6639 | Cloud Foundry Php-buildpack: Information Disclosure | 7.5 |