org.cloudfoundry.identity:cloudfoundry-identity-server vulnerabilities (Maven)

21 vulnerabilities.

• org.cloudfoundry.identity:cloudfoundry-identity-server Maven UAA User Token Revocation logic error CVE-2026-22723 Fix available 6.5 MediumMarch 5, 2026
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven UAA Privilege Escalation CVE-2018-15761 Fix available 9.9 CriticalNovember 19, 2018
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA accepts refresh token as access token on admin endpoints CVE-2018-11047 Fix available 7.5 HighJuly 24, 2018
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA open redirect CVE-2018-11041 Fix available 6.1 MediumJune 25, 2018
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven UAA privilege escalation across identity zones CVE-2018-1262 Fix available 7.2 HighMay 15, 2018
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA SessionID present in Audit Event Logs CVE-2018-1192 Fix available 8.8 HighFebruary 1, 2018
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint CVE-2018-1190 Fix available 6.1 MediumJanuary 4, 2018
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA Denial of Service through client token revocation endpoint CVE-2017-8031 Fix available 5.3 MediumNovember 27, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password CVE-2015-5172 Fix available 9.8 CriticalOctober 24, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry Runtime Insufficient Session Expiration vulnerability CVE-2015-5171 Fix available 9.8 CriticalOctober 24, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry Runtime Cross-Site Request Forgery vulnerability CVE-2015-5170 Fix available 8.8 HighOctober 24, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA Identity Zone Admin Privilege Escalation CVE-2017-8032 Fix available 6.6 MediumJuly 10, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA privilege escalation with user invitations CVE-2017-4992 Fix available 9.8 CriticalJune 13, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA password reset vulnerability CVE-2017-4991 Fix available 7.2 HighJune 13, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Blind SQL Injection with privileged Cloud Foundry UAA endpoints CVE-2017-4974 Fix available 6.5 MediumJune 13, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA Privilege Escalation CVE-2017-4973 Fix available 8.8 HighJune 13, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry UAA reset password vulnerable to brute force attack CVE-2016-3084 Fix available 8.1 HighMay 25, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password CVE-2015-3189 Fix available 3.7 LowMay 25, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry vulnerable to Improper Certificate Validation CVE-2016-5016 Fix available 5.9 MediumApril 24, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry denial of service vulnerability CVE-2017-4960 Fix available 7.5 HighMarch 10, 2017
• org.cloudfoundry.identity:cloudfoundry-identity-server Maven Cloud Foundry vulnerable to Cross-Site Request Forgery CVE-2016-6637 Fix available 9.6 CriticalSeptember 30, 2016