How many Pivotal cloud foundry uaa-release CVEs are in CISA KEV?

None of Pivotal cloud foundry uaa-release's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Pivotal cloud foundry uaa-release are affected?

20 distinct Pivotal cloud foundry uaa-release versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Pivotal cloud foundry uaa-release CVEs?

Pivotal cloud foundry uaa-release's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-295 (Improper Certificate Validation), CWE-384 (Session Fixation), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

What is the average severity of Pivotal cloud foundry uaa-release CVEs?

The average CVSS base score across Pivotal cloud foundry uaa-release's scored CVEs is 7.3.

RadicalNotion.AI

Log in Create an account

Pivotal

8 CVEs

Pivotal cloud foundry uaa-release Vulnerabilities

Name: Pivotal cloud foundry uaa-release vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for cloud foundry uaa-release by Pivotal.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.3

Avg CVSS

2017–2019

Last updated July 11, 2019

Overview

Pivotal cloud foundry uaa-release has 8 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

Severity and exploitation

How the CVSS severity of Pivotal cloud foundry uaa-release's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High5

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Pivotal cloud foundry uaa-release's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Pivotal cloud foundry uaa-release CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Pivotal cloud foundry uaa-release version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 73.0.01 CVE
< 73.3.01 CVE
<= 12.21 CVE
<= 261 CVE
45.7 <= v <= 45.71 CVE
48 <= v < 52.91 CVE
52.7 <= v <= 52.71 CVE
52.9 <= v < 55.11 CVE
53.3 <= v <= 53.31 CVE
55.1 <= v < 601 CVE
57 <= v <= 571 CVE
57.1 <= v <= 57.11 CVE
58 <= v <= 581 CVE
60.0 <= v < 66.01 CVE

Fixed in

52.91 CVE
55.11 CVE
601 CVE
66.01 CVE
73.0.01 CVE
73.3.01 CVE

Find a version

8 CVEs

Sort

Medium vulnerability · 2019-07-11
CVE-2019-11268
Patch
CWE-200
Medium · CVSS 4.3
EPSS 1.0% (62th pct)2019-07-11
High vulnerability · 2019-06-19
CVE-2019-3787
Patch
CWE-840
High · CVSS 8.8
EPSS 1.1% (65th pct)2019-06-19
High vulnerability · 2018-12-13
CVE-2018-15754
Patch
CWE-863
High · CVSS 8.8
EPSS 1.8% (78th pct)2018-12-13
Cloud Foundry UAA open redirect
CVE-2018-11041
Patch
CWE-601
Medium · CVSS 6.1
EPSS 0.9% (57th pct)2018-06-25
UAA privilege escalation across identity zones
CVE-2018-1262
Patch
High · CVSS 7.2
EPSS 1.3% (70th pct)2018-05-15
Cloud Foundry UAA SessionID present in Audit Event Logs
CVE-2018-1192
Patch
CWE-200
High · CVSS 8.8
EPSS 1.0% (63th pct)2018-02-01
High vulnerability · 2017-06-13
CVE-2017-4963CWE-384
High · CVSS 8.1
EPSS 0.9% (59th pct)2017-06-13
Cloud Foundry vulnerable to Improper Certificate Validation
CVE-2016-5016
Patch
CWE-295
Medium · CVSS 5.9
EPSS 1.0% (63th pct)2017-04-24

Common weakness types

The CWE weakness categories most often found in Pivotal cloud foundry uaa-release CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Pivotal cloud foundry uaa-release CVEs were published each year.

2017

2

2018

4

2019

2

Other Pivotal products

Browse vulnerabilities for other products by Pivotal.

cloud foundry uaa32 CVEs cloud foundry elastic runtime30 CVEs cloud foundry18 CVEs spring framework16 CVEs rabbitmq12 CVEs operations manager11 CVEs Pivotal Application Service9 CVEs spring_security8 CVEs

All Pivotal vulnerabilities

Frequently asked questions

Common questions about Pivotal cloud foundry uaa-release vulnerabilities.

How many CVEs does Pivotal cloud foundry uaa-release have?: Pivotal cloud foundry uaa-release has 8 published CVE records since 2017.
How many Pivotal cloud foundry uaa-release CVEs are in CISA KEV?: None of Pivotal cloud foundry uaa-release's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Pivotal cloud foundry uaa-release vulnerabilities?: No Pivotal cloud foundry uaa-release CVEs currently have a tracked public exploit in this dataset.
Which versions of Pivotal cloud foundry uaa-release are affected?: 20 distinct Pivotal cloud foundry uaa-release versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Pivotal cloud foundry uaa-release CVEs?: Pivotal cloud foundry uaa-release's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-295 (Improper Certificate Validation), CWE-384 (Session Fixation), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
What is the average severity of Pivotal cloud foundry uaa-release CVEs?: The average CVSS base score across Pivotal cloud foundry uaa-release's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Pivotal cloud foundry uaa-release vulnerabilities

Get an alert for each new Pivotal cloud foundry uaa-release CVE, with AI-written analysis and remediation steps.

Create an account See pricing