Skip to contentPivotal Software Cloud Foundry Uaa vulnerabilities
- pivotal software cloud foundry uaa, cloud foundry cf deployment, uaa release +1 more +3 moreUAA is vulnerable to a Blind SCIM injection leading to information disclosureCVE-2019-112824.3 Medium
- pivotal software cloud foundry uaa, cloud foundry uaa release (oss), pivotal software application service +1 more +3 moreUAA clients.write vulnerabilityCVE-2019-112707.3 High
- pivotal software cloud foundry uaa, cloud foundry uaa release (oss) +1 moreUAA - Login app subject to clickjacking attackCVE-2019-37946.5 Medium
- cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 moreUAA SQL Identity Zone VulnerabilityCVE-2019-112686.5 Medium
- cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 moreUAA defaults email address to an insecure domainCVE-2019-37878.3 High
- cloud foundry uaa release, pivotal software cloud foundry uaa-release +1 moreUAA can issue tokens across identity providers if users with matching usernames existCVE-2018-157544.2 Medium
- cloud foundry uaa, uaa release, pivotal software cloud foundry uaa +1 more +3 moreUAA Privilege EscalationCVE-2018-15761Fix available9.9 Critical
- cloud foundry uaa, pivotal software cloud foundry uaa +1 moreCloud Foundry UAA accepts refresh token as access token on admin endpointsCVE-2018-11047Fix available7.5 High
- cloud foundry uaa, pivotal software cloud foundry uaa, cloud foundry uaa-release +2 moreCloud Foundry UAA open redirectCVE-2018-11041Fix available6.1 Medium
- cloud foundry cloudfoundry uaa, cloudfoundry cf-deployment, pivotal software cloud foundry uaa +1 more +3 moreUAA privilege escalation across identity zonesCVE-2018-1262Fix available7.2 High
- pivotal software cloud foundry uaa, cloud foundry cf-deployment, cloud foundry cf-release +1 more +3 moreCloud Foundry UAA SessionID present in Audit Event LogsCVE-2018-1192Fix available8.8 High
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF)...CVE-2015-51738.8 High
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten PasswordCVE-2015-5172Fix available9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime Insufficient Session Expiration vulnerabilityCVE-2015-5171Fix available9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime Cross-Site Request Forgery vulnerabilityCVE-2015-5170Fix available8.8 High
- cloudfoundry cloud foundry, pivotal software cloud foundry cf, cloud foundry uaa +1 more +3 moreCloud Foundry UAA Identity Zone Admin Privilege EscalationCVE-2017-8032Fix available6.6 Medium
- cloudfoundry cloud foundry, cloud foundry uaa bosh, pivotal software cloud foundry cf +1 more +3 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA...CVE-2017-49947.5 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry uaa +1 more +3 moreCloud Foundry UAA privilege escalation with user invitationsCVE-2017-4992Fix available9.8 Critical
- cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 moreCloud Foundry UAA password reset vulnerabilityCVE-2017-4991Fix available7.2 High
- cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 moreBlind SQL Injection with privileged Cloud Foundry UAA endpointsCVE-2017-4974Fix available6.5 Medium
- cloud foundry uaa, pivotal software cloud foundry uaa, cloudfoundry cloud foundry uaa bosh +1 more +3 moreCloud Foundry UAA Privilege EscalationCVE-2017-4973Fix available8.8 High
- cloud foundry uaa, cloudfoundry cf-release, cloud foundry uaa bosh +1 more +3 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA...CVE-2017-49727.5 High
- pivotal software cloud foundry cf-release, cloud foundry uaa, cloud foundry uaa-release +2 moreAn issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier...CVE-2017-49638.1 High
- cloudfoundry cloud foundry, pivotal software cloud foundry uaa, login-server +2 more +4 moreCloud Foundry UAA reset password vulnerable to brute force attackCVE-2016-3084Fix available8.1 High
- cloudfoundry cloud foundry, pivotal software login-server, cloudfoundry cloud foundry uaa bosh +2 more +4 moreThe UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0...CVE-2016-07816.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...CVE-2015-31918.8 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...CVE-2015-31906.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten PasswordCVE-2015-3189Fix available3.7 Low
- pivotal software cloud foundry, cloud foundry elastic runtime, cloud foundry uaa +1 more +3 moreCloud Foundry vulnerable to Improper Certificate ValidationCVE-2016-5016Fix available5.9 Medium
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreSQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3...CVE-2016-4468Public exploit8.8 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 moreCloud Foundry denial of service vulnerabilityCVE-2017-4960Fix available7.5 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 moreCloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x...CVE-2016-66598.1 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreThe UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8,...CVE-2016-66518.8 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreCloud Foundry vulnerable to Cross-Site Request ForgeryCVE-2016-6637Fix available9.6 Critical
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreThe OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before...CVE-2016-66365.3 Medium