How many CVEs does Pivotal Pivotal Application Service have?

Pivotal Pivotal Application Service has 9 published CVE records since 2018.

How many Pivotal Pivotal Application Service CVEs are in CISA KEV?

None of Pivotal Pivotal Application Service's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Pivotal Pivotal Application Service vulnerabilities?

No Pivotal Pivotal Application Service CVEs currently have a tracked public exploit in this dataset.

Which versions of Pivotal Pivotal Application Service are affected?

50 distinct Pivotal Pivotal Application Service versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Pivotal Pivotal Application Service CVEs?

Pivotal Pivotal Application Service's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-295 (Improper Certificate Validation), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).

How many critical Pivotal Pivotal Application Service vulnerabilities are there?

Pivotal Pivotal Application Service has 1 critical and 4 high-severity CVEs.

What is the average severity of Pivotal Pivotal Application Service CVEs?

The average CVSS base score across Pivotal Pivotal Application Service's scored CVEs is 7.6.

Pivotal Application Service Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Pivotal Application Service version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.0.0 <= v < 2.0.212 CVEs
2.1.0 <= v < 2.1.132 CVEs
2.2.0 <= v < 2.2.52 CVEs
1.11.0 <= v < 1.11.261 CVE
1.12.0 <= v < 1.12.141 CVE
1.12.0 <= v < 1.12.221 CVE
1.12.0 <= v < 1.12.261 CVE
1.12.x <= v < 1.12.261 CVE
2.0.0 <= v < 2.0.131 CVE
2.0.0 <= v < 2.0.171 CVE
2.0.0 <= v < 2.0.51 CVE
2.0.x <= v < 2.0.171 CVE
2.1.0 <= v < 2.1.41 CVE
2.1.0 <= v < 2.1.81 CVE
2.1.x <= v < 2.1.81 CVE
2.2 <= v < 2.2.121 CVE
2.2.0 <= v < 2.2.11 CVE
2.2.x <= v < 2.2.11 CVE
2.3 <= v < 2.3.71 CVE
2.3.0 <= v < 2.3.181 CVE
2.3.0 <= v <= 2.3.181 CVE
2.4 <= v < 2.4.31 CVE
2.4.0 <= v < 2.4.141 CVE
2.4.0 <= v <= 2.4.141 CVE
2.5 <= v < 2.5.11 CVE
2.5.0 <= v < 2.5.101 CVE
2.5.0 <= v <= 2.5.11 CVE
2.6.0 <= v < 2.6.51 CVE
2.6.0 <= v <= 2.6.51 CVE

Fixed in

2.0.212 CVEs
2.1.132 CVEs
2.2.52 CVEs
1.11.261 CVE
1.12.141 CVE
1.12.221 CVE
1.12.261 CVE
2.0.131 CVE
2.0.171 CVE
2.0.51 CVE
2.1.41 CVE
2.1.81 CVE
2.2.11 CVE
2.2.121 CVE

Find a version

9 CVEs

Sort

CSV Injection in usage report downloaded from Pivotal Application Manager
CVE-2019-11275
Patch
CWE-74
Medium · CVSS 4.3
EPSS 1.1% (62th pct)2019-10-01
High vulnerability · 2019-09-20
CVE-2019-11280
Patch
CWE-269
High · CVSS 8.8
EPSS 1.5% (72th pct)2019-09-20
UAA redirect-uri allows wildcard in the subdomain
CVE-2019-3788
Patch
CWE-601
High · CVSS 8.7
EPSS 0.8% (55th pct)2019-04-25
Critical vulnerability · 2019-03-07
CVE-2019-3777
Patch
CWE-295
Critical · CVSS 9.8
EPSS 1.9% (78th pct)2019-03-07
High vulnerability · 2018-09-17
CVE-2018-11088
Patch
High · CVSS 8.8
EPSS 1.0% (59th pct)2018-09-17
High vulnerability · 2018-09-17
CVE-2018-11086
Patch
High · CVSS 8.8
EPSS 1.0% (59th pct)2018-09-17
Medium vulnerability · 2018-07-24
CVE-2018-11044
Patch
Medium · CVSS 6.5
EPSS 0.7% (52th pct)2018-07-24
Medium vulnerability · 2018-05-11
CVE-2018-1278
Patch
Medium · CVSS 6.5
EPSS 1.3% (68th pct)2018-05-11
Medium vulnerability · 2018-03-16
CVE-2018-1200
Patch
Medium · CVSS 6.5
EPSS 1.3% (68th pct)2018-03-16

Pivotal Application Service Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Pivotal products

Frequently asked questions

References

Track Pivotal Application Service vulnerabilities