Skip to contentPivotal Software vulnerabilities
Newest
- pivotal spring amqp, spring amqp, pivotal software spring advanced message queuing protocol +1 more +3 moreTLS validation errorCVE-2018-11087Fix available5.9 Medium
- pivotal cloud foundry elastic runtimePivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0...CVE-2016-07155.9 Medium
- cloud foundry uaa, pivotal software cloud foundry uaa +1 moreCloud Foundry UAA accepts refresh token as access token on admin endpointsCVE-2018-11047Fix available7.5 High
- pivotal application servicePivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2...CVE-2018-110446.5 Medium
- pivotal operations managerPivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to...CVE-2018-110455.9 Medium
- pivotal operations managerPivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX...CVE-2018-110466.5 Medium
- cloud foundry uaa, pivotal software cloud foundry uaa, cloud foundry uaa-release +2 moreCloud Foundry UAA open redirectCVE-2018-11041Fix available6.1 Medium
- cloud foundry diego, pivotal software cloud foundry diego, cloudfoundry cf-deployment +2 moreCloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in...CVE-2018-12657.2 High
- cloud foundry windows2012r2 stemcell, pivotal software windows stemcells +1 moreWindows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure...CVE-2018-12766.5 Medium
- cloud foundry cloudfoundry uaa, cloudfoundry cf-deployment, pivotal software cloud foundry uaa +1 more +3 moreUAA privilege escalation across identity zonesCVE-2018-1262Fix available7.2 High
- pivotal greenplum command centerPivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection...CVE-2018-12807.5 High
- pivotal application serviceApps Manager included in Pivotal Application Service, versions 1.12.x prior to 1.12.22, 2.0.x...CVE-2018-12786.5 Medium
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE)CVE-2018-1260Public exploitFix availableEPSS 10.6%9.8 Critical
- broadcom spring data commons, xmlbeam, pivotal software spring data rest +2 moreSpring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity referencesCVE-2018-1259Public exploitFix available7.5 High
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- broadcom spring data commons, pivotal software spring data rest, spring by pivotal framework +1 more +3 moreSpring Data Commons contain a property path parser vulnerability caused by unlimited resource allocationCVE-2018-1274Fix available7.5 High
- pivotal gemfire for pcf, pivotal software gemfire +1 morePivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an...CVE-2016-82207.5 High
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 moreSpring Data Commons remote code injection vulnerabilityCVE-2018-1273In KEVPublic exploitFix availableEPSS 97.0%9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime +1 moreApplications in cf-release before 245 can be configured and pushed with a user-provided custom...CVE-2016-66589.6 Critical
- pivotal software bosh cliCloud Foundry BOSH CLI, versions prior to v3.0.1, contains an improper access control...CVE-2018-12318.8 High
- pivotal software spring batch admin, spring by pivotal batch admin +1 morePivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection....CVE-2018-12308.8 High
- pivotal software spring batch admin, spring by pivotal batch admin +1 moreCross-site Scripting in Pivotal Spring Batch AdminCVE-2018-12296.1 Medium
- dell emc windows stemcellsIn Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on...CVE-2018-11978.5 High
- dell emc apps manager for pcf, pivotal software application service +1 moreApps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14,...CVE-2018-12006.5 Medium
- dell emc gemfire broker for cloud foundry, pivotal software gemfire for pivotal cloud foundry +1 moreThe GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API...CVE-2016-98809.8 Critical
- pivotal software concoursePivotal Concourse after 2018-03-05 might allow remote attackers to have an unspecified impact, if...CVE-2018-12277.5 High
- pivotal software cloud foundry uaa, cloud foundry cf-deployment, cloud foundry cf-release +1 more +3 moreCloud Foundry UAA SessionID present in Audit Event LogsCVE-2018-1192Fix available8.8 High
- pivotal software spring data rest, vmware spring boot, pivotal spring data rest and spring boot +2 moreRemote code execution in PATCH requests in Spring Data RESTCVE-2017-8046Public exploitFix availableEPSS 74.5%9.8 Critical
- pivotal software spring advanced message queuing protocolDeserialization of Untrusted Data in Spring AMQPCVE-2017-8045Fix available9.8 Critical
- pivotal software credhub-releaseIn Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce...CVE-2017-80388.8 High
- pivotal software cf-deploymentIn Cloud Foundry Foundation cf-deployment v0.35.0, a misconfiguration with Loggregator and syslog...CVE-2017-143907.5 High
- pivotal software spring-ldap, debian linux +1 moreImproper Authentication in Pivotal Spring-LDAPCVE-2017-8028Fix available8.1 High
- pivotal software grootfsCloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. For example, this could allow an…CVE-2017-143887.8 High
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF)...CVE-2015-51738.8 High
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten PasswordCVE-2015-5172Fix available9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime Insufficient Session Expiration vulnerabilityCVE-2015-5171Fix available9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime Cross-Site Request Forgery vulnerabilityCVE-2015-5170Fix available8.8 High
- cloudfoundry cloud foundry, pivotal software cloud foundry cf, cloud foundry uaa +1 more +3 moreCloud Foundry UAA Identity Zone Admin Privilege EscalationCVE-2017-8032Fix available6.6 Medium
- cloudfoundry cloud foundry, cloud foundry uaa bosh, pivotal software cloud foundry cf +1 more +3 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA...CVE-2017-49947.5 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry uaa +1 more +3 moreCloud Foundry UAA privilege escalation with user invitationsCVE-2017-4992Fix available9.8 Critical
- cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 moreCloud Foundry UAA password reset vulnerabilityCVE-2017-4991Fix available7.2 High
- cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 moreBlind SQL Injection with privileged Cloud Foundry UAA endpointsCVE-2017-4974Fix available6.5 Medium
- cloud foundry uaa, pivotal software cloud foundry uaa, cloudfoundry cloud foundry uaa bosh +1 more +3 moreCloud Foundry UAA Privilege EscalationCVE-2017-4973Fix available8.8 High
- cloud foundry uaa, cloudfoundry cf-release, cloud foundry uaa bosh +1 more +3 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA...CVE-2017-49727.5 High
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...CVE-2017-4967Fix available6.1 Medium
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...CVE-2017-4966Fix available7.8 High
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...CVE-2017-4965Fix available6.1 Medium
- pivotal software cloud foundry cf-release, cloud foundry uaa, cloud foundry uaa-release +2 moreAn issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier...CVE-2017-49638.1 High
- pivotal software cloud foundry elastic runtimeAn issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x...CVE-2017-49598.8 High
- pivotal software cloud foundry elastic runtimeAn issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x...CVE-2017-49559.8 Critical
- Show moreLoading…