Product by Pivotal

    Cloud Foundry UAA Release (OSS)

    8 known vulnerabilities in Cloud Foundry UAA Release (OSS) (Pivotal), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cloud Foundry UAA Release (OSS) (Pivotal)
    HighCVE-2018-1192

    Pivotal Software Cloud Foundry (PCF) UAA: security vulnerability

    also in 1 other product

    		8.8
    HighCVE-2019-3787

    UAA defaults email address to an insecure domain

    also in 1 other product

    		8.3
    HighCVE-2018-1262

    CloudFoundry UAA: Privilege Escalation

    also in 3 other products

    		7.2
    HighCVE-2018-15754

    UAA can issue tokens across identity providers if users with matching usernames exist

    also in 1 other product

    		4.2
    HighCVE-2017-4963

    Cloud Foundry Foundation: Session Fixation

    also in 1 other product

    		8.1
    MediumCVE-2019-11268

    UAA SQL Identity Zone Vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2016-5016

    Pivotal Software Cloud Foundry (PCF): security vulnerability

    also in 3 other products

    		5.9
    MediumCVE-2018-11041

    Cloud Foundry UAA: Open Redirect

    also in 2 other products

    		6.1

    All products by Pivotal