Skip to contentPivotal vulnerabilities
Newest
- pivotal operations managerPivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to...CVE-2018-110455.9 Medium
- pivotal operations managerPivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX...CVE-2018-110466.5 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)CVE-2018-11039Fix available5.9 Medium
- pivotal spring-flexPivotal/Spring Spring-flex's Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationCVE-2017-32038.1 High
- pivotal spring integration zipspring-integration-zip Arbitrary File WriteCVE-2018-1263Public exploitFix available4.7 Medium
- pivotal greenplum command centerPivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection...CVE-2018-12807.5 High
- pivotal application serviceApps Manager included in Pivotal Application Service, versions 1.12.x prior to 1.12.22, 2.0.x...CVE-2018-12786.5 Medium
- pivotal spring integration zipPath traversal in org.springframework.integration:spring-integration-zipCVE-2018-1261Fix available4.7 Medium
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE)CVE-2018-1260Public exploitFix availableEPSS 10.6%9.8 Critical
- broadcom spring data commons, xmlbeam, pivotal software spring data rest +2 moreSpring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity referencesCVE-2018-1259Public exploitFix available7.5 High
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- pivotal spring cloud sso connectorIssuer validation regression in Spring Cloud SSO ConnectorCVE-2018-1256Fix available8.1 High
- pivotal gemfire for pcf, pivotal software gemfire +1 morePivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an...CVE-2016-82207.5 High
- cloudfoundry cf-release, pivotal uaa, uaa bosh +2 morePivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpointCVE-2018-1190Fix available6.1 Medium
- pivotal software spring data rest, vmware spring boot, pivotal spring data rest and spring boot +2 moreRemote code execution in PATCH requests in Spring Data RESTCVE-2017-8046Public exploitFix availableEPSS 74.5%9.8 Critical
- cloudfoundry cf-release, pivotal capi-release +1 moreIn Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions...CVE-2017-80487.8 High
- cloudfoundry cf-release, pivotal routing-release +1 moreIn Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all...CVE-2017-80476.1 Medium
- cloudfoundry uaa-release, pivotal elastic runtime, cloudfoundry cf-release +1 more +3 moreThe identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and...CVE-2016-07328.8 High
- pivotal pcf tile generatorAn issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by...CVE-2017-49757.5 High
- pivotal spring framework, spring security, spring security +2 moreSpring Security and Spring Framework may not recognize certain paths that should be protectedCVE-2016-5007Fix available7.5 High
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel viewsCVE-2016-4977Public exploitFix availableEPSS 80.0%8.8 High
- cloudfoundry cloud foundry, pivotal bosh stemcell +1 moreAn endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6...CVE-2016-44359.0 Critical
- cloudfoundry cloud foundry, pivotal software cloud foundry uaa, login-server +2 more +4 moreCloud Foundry UAA reset password vulnerable to brute force attackCVE-2016-3084Fix available8.1 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreThe Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic...CVE-2016-21656.5 Medium
- cloudfoundry cloud foundry, pivotal software login-server, cloudfoundry cloud foundry uaa bosh +2 more +4 moreThe UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0...CVE-2016-07816.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreIt was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x...CVE-2016-07807.5 High
- cloudfoundry cloud foundry, garden linux, pivotal software cloud foundry elastic runtime +2 moreCloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to...CVE-2016-07619.8 Critical
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...CVE-2015-31918.8 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...CVE-2015-31906.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten PasswordCVE-2015-3189Fix available3.7 Low
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreA path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller...CVE-2015-18346.5 Medium
- pivotal spring security, spring security +1 moreAuthorization Bypass in Spring SecurityCVE-2014-3527Fix available9.8 Critical
- pivotal spring security, spring security +1 moreImproper Authentication in Spring SecurityCVE-2014-0097Fix available7.3 High
- cloudfoundry php-buildpack, pivotal cloud foundry elastic runtime +1 moreCloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before...CVE-2016-66397.5 High
- pivotal operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or...CVE-2016-09309.8 Critical
- pivotal cloud foundry elastic runtimeMultiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6...CVE-2016-09287.4 High
- pivotal spring frameworkImproper Restriction of XML External Entity Reference in Spring FrameworkCVE-2014-0225Fix available8.8 High
- pivotal spring mvc, pivotal software spring framework +1 moreImproper Neutralization of Input During Web Page Generation in Spring FrameworkCVE-2013-6430Fix available5.4 Medium