Skip to contentPivotal Software vulnerabilities
Newest
- pivotal software cloud foundry elastic runtimeAn issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x...CVE-2017-27739.8 Critical
- pivotal spring framework, spring security, spring security +2 moreSpring Security and Spring Framework may not recognize certain paths that should be protectedCVE-2016-5007Fix available7.5 High
- cloudfoundry cloud foundry, pivotal software cloud foundry uaa, login-server +2 more +4 moreCloud Foundry UAA reset password vulnerable to brute force attackCVE-2016-3084Fix available8.1 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreThe Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic...CVE-2016-21656.5 Medium
- cloudfoundry cloud foundry, pivotal software login-server, cloudfoundry cloud foundry uaa bosh +2 more +4 moreThe UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0...CVE-2016-07816.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreIt was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x...CVE-2016-07807.5 High
- cloudfoundry cloud foundry, garden linux, pivotal software cloud foundry elastic runtime +2 moreCloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to...CVE-2016-07619.8 Critical
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...CVE-2015-31918.8 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...CVE-2015-31906.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten PasswordCVE-2015-3189Fix available3.7 Low
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreA path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller...CVE-2015-18346.5 Medium
- pivotal software cloud foundry, cloud foundry elastic runtime +1 moreThe Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation,...CVE-2016-50069.8 Critical
- pivotal software cloud foundry, cloud foundry elastic runtime, cloud foundry uaa +1 more +3 moreCloud Foundry vulnerable to Improper Certificate ValidationCVE-2016-5016Fix available5.9 Medium
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreSQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3...CVE-2016-4468Public exploit8.8 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 moreCloud Foundry denial of service vulnerabilityCVE-2017-4960Fix available7.5 High
- pivotal software gemfire for pivotal cloud foundryAn issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x...CVE-2016-98859.8 Critical
- pivotal software spring frameworkPivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitizedCVE-2016-9878Fix available7.5 High
- pivotal software rabbitmq, broadcom rabbitmq server +1 moreAn issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ...CVE-2016-9877Fix available9.8 Critical
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 moreCloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x...CVE-2016-66598.1 High
- pivotal software cloud foundry elastic runtime, cloud foundry ops manager +1 moreAn open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime...CVE-2016-66577.4 High
- pivotal software greenplumAn issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using...CVE-2016-66567.2 High
- pivotal software rabbitmq, oracle solaris +1 moreThe Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain...CVE-2015-8786Fix available6.5 Medium
- pivotal software cloud foundry cf mysqlThe MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28...CVE-2016-66537.5 High
- pivotal software spring data jpaImproper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPACVE-2016-6652Fix available5.6 Medium
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreThe UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8,...CVE-2016-66518.8 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreCloud Foundry vulnerable to Cross-Site Request ForgeryCVE-2016-6637Fix available9.6 Critical
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreThe OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before...CVE-2016-66365.3 Medium
- pivotal software rabbitmqThe metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4...CVE-2016-09297.5 High
- pivotal software cloud foundry elastic runtimeCross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17...CVE-2016-09276.1 Medium
- pivotal software cloud foundry elastic runtimeCross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic...CVE-2016-09266.1 Medium
- pivotal software operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or...CVE-2016-08979.8 Critical
- pivotal software cloud foundry elastic runtimePivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254...CVE-2016-08967.3 High
- pivotal software operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie...CVE-2016-08839.8 Critical
- pivotal software spring framework, fedoraproject fedora +1 morePivotal Spring Framework DoS Attack with XML InputCVE-2015-3192Fix available5.5 Medium
- pivotal spring frameworkImproper Restriction of XML External Entity Reference in Spring FrameworkCVE-2014-0225Fix available8.8 High
- pivotal software spring frameworkModerate severity vulnerability that affects org.springframework:spring-coreCVE-2015-0201Fix available5.0 Medium
- pivotal software spring frameworkImproper Limitation of a Pathname to a Restricted Directory in Spring FrameworkCVE-2014-3578Fix available5.0 Medium
- pivotal software rabbitmqRabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a...CVE-2014-9494Fix available5.0 Medium
- pivotal software rabbitmq managementMultiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ...CVE-2015-0862Fix available3.5 Low
- pivotal software spring frameworkImproper Limitation of a Pathname to a Restricted Directory in Spring FrameworkCVE-2014-3625Public exploitFix available5.0 Medium
- pivotal software spring frameworkImproper Neutralization of Input During Web Page Generation in Spring FrameworkCVE-2014-1904Fix available4.3 Medium
- pivotal spring mvc, pivotal software spring framework +1 moreImproper Neutralization of Input During Web Page Generation in Spring FrameworkCVE-2013-6430Fix available5.4 Medium
- pivotal software spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2013-6429Fix availableEPSS 90.6%6.8 Medium