Cloudfoundry Cloud Foundry Uaa Bosh vulnerabilities

• cloudfoundry cloud foundry, pivotal software cloud foundry cf, cloud foundry uaa +1 more +3 more Cloud Foundry UAA Identity Zone Admin Privilege Escalation CVE-2017-8032 Fix available 6.6 MediumJuly 10, 2017
• cloudfoundry cloud foundry, cloud foundry uaa bosh, pivotal software cloud foundry cf +1 more +3 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA... CVE-2017-4994 7.5 HighJune 13, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry uaa +1 more +3 more Cloud Foundry UAA privilege escalation with user invitations CVE-2017-4992 Fix available 9.8 CriticalJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 more Cloud Foundry UAA password reset vulnerability CVE-2017-4991 Fix available 7.2 HighJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 more Blind SQL Injection with privileged Cloud Foundry UAA endpoints CVE-2017-4974 Fix available 6.5 MediumJune 13, 2017
• cloud foundry uaa, pivotal software cloud foundry uaa, cloudfoundry cloud foundry uaa bosh +1 more +3 more Cloud Foundry UAA Privilege Escalation CVE-2017-4973 Fix available 8.8 HighJune 13, 2017
• cloud foundry uaa, cloudfoundry cf-release, cloud foundry uaa bosh +1 more +3 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA... CVE-2017-4972 7.5 HighJune 13, 2017
• cloudfoundry cloud foundry, pivotal software cloud foundry uaa, login-server +2 more +4 more Cloud Foundry UAA reset password vulnerable to brute force attack CVE-2016-3084 Fix available 8.1 HighMay 25, 2017
• cloudfoundry cloud foundry, pivotal software login-server, cloudfoundry cloud foundry uaa bosh +2 more +4 more The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0... CVE-2016-0781 6.1 MediumMay 25, 2017
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3... CVE-2016-4468 Public exploit 8.8 HighApril 11, 2017
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 more Cloud Foundry denial of service vulnerability CVE-2017-4960 Fix available 7.5 HighMarch 10, 2017
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 more Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x... CVE-2016-6659 8.1 HighDecember 23, 2016
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8,... CVE-2016-6651 8.8 HighSeptember 30, 2016
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more Cloud Foundry vulnerable to Cross-Site Request Forgery CVE-2016-6637 Fix available 9.6 CriticalSeptember 30, 2016
• pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before... CVE-2016-6636 5.3 MediumSeptember 30, 2016