Skip to contentCloud Foundry Uaa Release vulnerabilities
- cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 moreUAA logs all query parameters with debug logging levelCVE-2019-112938.8 High
- cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 moreCloud Foundry UAA logs query parameters in tomcat access fileCVE-2019-112908.8 High
- pivotal software cloud foundry uaa, cloud foundry cf deployment, uaa release +1 more +3 moreUAA is vulnerable to a Blind SCIM injection leading to information disclosureCVE-2019-112824.3 Medium
- cloud foundry uaa release (oss), cloudfoundry uaa release +1 morePrivilege Escalation via Scope Manipulation in UAACVE-2019-112798.7 High
- cloud foundry uaa release (oss), cloudfoundry user account and authentication +1 morePrivilege Escalation via Blind SCIM Injection in UAACVE-2019-112788.7 High
- cloud foundry uaa release (oss), cloudfoundry user account and authentication +1 moreUAA SCIM Filter XSSCVE-2019-112744.3 Medium
- pivotal software cloud foundry uaa, cloud foundry uaa release (oss), pivotal software application service +1 more +3 moreUAA clients.write vulnerabilityCVE-2019-112707.3 High
- pivotal software cloud foundry uaa, cloud foundry uaa release (oss) +1 moreUAA - Login app subject to clickjacking attackCVE-2019-37946.5 Medium
- cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 moreUAA SQL Identity Zone VulnerabilityCVE-2019-112686.5 Medium
- cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 moreUAA defaults email address to an insecure domainCVE-2019-37878.3 High
- cloud foundry cf-deployment, credhub, uaa release (oss) +2 more +4 moreJava Projects using HTTP to fetch dependenciesCVE-2019-38018.7 High
- cloudfoundry uaa release, cloud foundry uaa release (oss), pivotal application service +2 moreUAA redirect-uri allows wildcard in the subdomainCVE-2019-37888.7 High
- cloud foundry uaa release (oss), cloudfoundry uaa release +1 moreUAA allows users to modify their own email addressCVE-2019-37757.1 High
- cloud foundry uaa release, pivotal software cloud foundry uaa-release +1 moreUAA can issue tokens across identity providers if users with matching usernames existCVE-2018-157544.2 Medium
- cloud foundry uaa, uaa release, pivotal software cloud foundry uaa +1 more +3 moreUAA Privilege EscalationCVE-2018-15761Fix available9.9 Critical
- cloud foundry uaa, uaa release, pivotal software cloudfoundry uaa +1 more +3 moreCloud Foundry UAA MFA does not prevent brute force of MFA codeCVE-2018-110826.6 Medium