Pivotal vulnerabilities

Products

• Cloud Foundry 10
• Spring Framework 7
• Spring Data Commons 5
• Concourse 4
• Application Service 4
• Vmware Harbor Registry 4
• Apps Manager 3
• Ops Manager 3
• Rabbitmq 3
• Reactor Netty 3
• Spring Security 3
• Spring Security Oauth 3
• Application Service 2
• Cloud Foundry Deployment 2
• Cloud Foundry Elastic Runtime 2
• Cloud Foundry Notifications 2
• Cloud Foundry Routing Release 2
• Application Service (pas) 2
• Operations Manager 2
• Rabbitmq For Pcf 2
• Rabbitmq For Pivotal Platform 2
• Spring Integration Zip 2
• Spring Security Oauth 2

Newest

• pivotal reactor netty Reactor Netty HTTP Server Denial of Service With Pipelined Requests CVE-2026-47874 5.3 MediumAugust 26, 2026
• broadcom spring data commons, spring data commons +1 more Spring Data Commons Denial of Service via Data Binding CVE-2026-41721 Fix available 5.9 MediumJune 9, 2026
• broadcom spring data commons, spring data commons +1 more Spring Data web support unbounded negative-result cache keyed on attacker-supplied property names CVE-2026-41716 Fix available 7.5 HighJune 9, 2026
• broadcom spring data commons, spring data commons +1 more Potential Denial of Service through crafted Sort Parameters CVE-2026-41711 Fix available 5.9 MediumJune 9, 2026
• broadcom spring data commons, spring data commons +1 more Denial of Service in Spring Data Commons Property Path Resolution CVE-2026-41695 Fix available 7.5 HighJune 9, 2026
• cloud foundry routing release, pivotal cloud foundry deployment, cloud foundry routing release +1 more +3 more CVE-2023-34061 – Gorouter route pruning CVE-2023-34061 7.5 HighJanuary 12, 2024
• cloud foundry cf-nfs-volume release, notifications, smb-volume release +3 more +5 more CF workflows leak credentials in system audit logs CVE-2023-20885 6.5 MediumJune 16, 2023
• pivotal spring security oauth, spring security oauth, oracle communications design studio +2 more Denial of service in Spring Security OAuth2 CVE-2022-22969 Fix available 6.5 MediumApril 21, 2022
• pivotal concourse Concourse Open Redirect in the /sky/login endpoint CVE-2020-5409 Fix available 7.6 HighMay 13, 2020
• pivotal vmware tanzu application service for vms, vmware tanzu application service for vms +1 more PCF Autoscaling logs its database credentials CVE-2020-5406 6.5 MediumApril 10, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more Privilege Escalation in Cloud Native Computing Foundation Harbor CVE-2019-19023 Fix available 8.8 HighMarch 20, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more SQL Injection in Cloud Native Computing Foundation Harbor CVE-2019-19029 Fix available 7.2 HighMarch 20, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more SQL Injection in Cloud Native Computing Foundation Harbor CVE-2019-19026 Fix available 4.9 MediumMarch 20, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor CVE-2019-19025 Fix available 8.8 HighMarch 20, 2020
• broadcom reactor netty DoS Via Malformed URL with Reactor Netty HTTP Server CVE-2020-5403 Fix available 6.5 MediumMarch 3, 2020
• broadcom reactor netty Authentication Leak On Redirect With Reactor Netty HttpClient CVE-2020-5404 Fix available 6.5 MediumMarch 3, 2020
• pivotal tc runtimes, tc server, tc server 3.x +3 more +5 more tcServer JMX Socket Listener Registry Rebinding Local Privilege Escalation CVE-2019-11288 7.3 HighJanuary 27, 2020
• pivotal ops manager, pivotal software operations manager +1 more Pivotal Ops Manager logs query parameters in tomcat access file CVE-2019-11292 8.8 HighJanuary 8, 2020
• pivotal rabbitmq, rabbitmq for pivotal platform, broadcom rabbitmq server +3 more +5 more RabbitMQ Web Management Plugin DoS via heap overflow CVE-2019-11287 Public exploitFix available 4.5 MediumNovember 22, 2019
• pivotal rabbitmq, broadcom rabbitmq server, pivotal rabbitmq for pivotal platform +1 more +3 more RabbitMQ XSS attack via federation and shovel endpoints CVE-2019-11291 Fix available 3.1 LowNovember 22, 2019
• broadcom reactor netty Reactor Netty authentication leak in redirects CVE-2019-11284 Fix available 6.8 MediumOctober 17, 2019
• pivotal rabbitmq, rabbitmq for pcf, debian linux +3 more +5 more RabbitMQ XSS attack CVE-2019-11281 Fix available 2.4 LowOctober 16, 2019
• pivotal apps manager, pivotal software application service +1 more CSV Injection in usage report downloaded from Pivotal Application Manager CVE-2019-11275 3.5 LowOctober 1, 2019
• pivotal software application service, pivotal application service (pas) +1 more Privilege escalation through the invitations service CVE-2019-11280 8.8 HighSeptember 20, 2019
• pivotal software application service, pivotal application service (pas) +1 more Apps Manager sends tokens to Spring apps via HTTP CVE-2019-11276 5.4 MediumAugust 19, 2019
• cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 more CF CLI writes the client id and secret to config file CVE-2019-3800 6.3 MediumAugust 5, 2019
• pivotal software container service, pivotal container service (pks) +1 more PKS Telemetry logs credentials CVE-2019-11273 2.2 LowJuly 23, 2019
• pivotal ops manager, pivotal software operations manager +1 more Ops Manager uaa client issues tokens after refresh token expiration CVE-2019-3790 6.1 MediumJune 6, 2019
• cloud foundry cf-deployment, credhub, uaa release (oss) +2 more +4 more Java Projects using HTTP to fetch dependencies CVE-2019-3801 8.7 HighApril 25, 2019
• cloudfoundry uaa release, cloud foundry uaa release (oss), pivotal application service +2 more UAA redirect-uri allows wildcard in the subdomain CVE-2019-3788 8.7 HighApril 25, 2019
• pivotal apps manager, pivotal software application service +1 more Invitations Service supports HTTP connections CVE-2019-3793 8.1 HighApril 24, 2019
• pivotal concourse Concourse 5.0.0 SQL Injection vulnerability CVE-2019-3792 Fix available 6.8 MediumApril 1, 2019
• pivotal apps manager, application service +1 more Apps Manager unverified SSL certs in Cloud Controller proxy CVE-2019-3777 8.0 HighMarch 7, 2019
• pivotal software operations manager, pivotal ops manager +1 more Reflected XSS in Pivotal Operations Manager CVE-2019-3776 7.2 HighMarch 7, 2019
• pivotal concourse Concourse includes token in CLI authentication callback CVE-2019-3803 4.5 MediumJanuary 12, 2019
• pivotal concourse Pivotal Concourse allows malicious redirect urls on login CVE-2018-15798 Fix available 7.6 HighDecember 19, 2018
• pivotal rabbitmq for pcf, pivotal software rabbitmq +1 more RabbitMQ cluster compromise due to deterministically generated cookie CVE-2018-1279 Fix available 8.5 HighDecember 10, 2018
• pivotal on demand services sdk, pivotal software broker api +1 more On Demand Services SDK Timing Attack Vulnerability CVE-2018-15759 9.1 CriticalNovember 19, 2018
• pivotal spring security oauth, spring security oauth +1 more Privilege Escalation in spring-security-oauth2 CVE-2018-15758 Fix available 9.6 CriticalOctober 18, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 more DoS Attack via Range Requests CVE-2018-15756 Fix available 7.5 HighOctober 18, 2018
• pivotal container service PKS leaks IaaS Credentials to Application Logs CVE-2018-15763 9.0 CriticalOctober 5, 2018
• pivotal software operations manager, pivotal pivotal-ops-manager +1 more Pivotal Operations Manager UAA config - temp Ram Disk CVE-2018-11081 7.9 HighOctober 5, 2018
• cloud foundry container runtime, pivotal cloud foundry container runtime +1 more Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and... CVE-2018-1223 8.8 HighSeptember 17, 2018
• pivotal cloud cache Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during... CVE-2018-1198 8.8 HighSeptember 17, 2018
• pivotal application service Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1... CVE-2018-11088 8.8 HighSeptember 17, 2018
• pivotal application service Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior... CVE-2018-11086 8.8 HighSeptember 17, 2018
• pivotal spring amqp, spring amqp, pivotal software spring advanced message queuing protocol +1 more +3 more TLS validation error CVE-2018-11087 Fix available 5.9 MediumSeptember 14, 2018
• pivotal cloud foundry elastic runtime Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0... CVE-2016-0715 5.9 MediumSeptember 11, 2018
• pivotal application service Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2... CVE-2018-11044 6.5 MediumJuly 24, 2018
• emc rsa identity governance and lifecycle, rsa via lifecycle and governance, emc rsa identity management and governance +1 more +3 more RSA Identity Governance and Lifecycle Uncontrolled Search Path Vulnerability CVE-2018-11049 7.3 HighJuly 11, 2018
• Show olderLoading…