Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

pivotal software cloud foundry elastic runtime 1.6.17 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2017-2773
An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.60, 1.7.x versions before 1.7.41, 1.8.x versions before 1.8.23, and 1.9.x versions before 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged malicious users to impers...
Pivotal Software Cloud Foundry Elastic Runtime 1.8.17Pivotal Software Cloud Foundry Elastic Runtime 1.8.15Pivotal Software Cloud Foundry Elastic Runtime 1.8.10Pivotal Software Cloud Foundry Elastic Runtime 1.8.8Pivotal Software Cloud Foundry Elastic Runtime 1.8.1Pivotal Software Cloud Foundry Elastic Runtime 1.7.39Pivotal Software Cloud Foundry Elastic Runtime 1.7.32Pivotal Software Cloud Foundry Elastic Runtime 1.7.30Pivotal Software Cloud Foundry Elastic Runtime 1.7.25Pivotal Software Cloud Foundry Elastic Runtime 1.7.23Pivotal Software Cloud Foundry Elastic Runtime 1.7.16Pivotal Software Cloud Foundry Elastic Runtime 1.7.14Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.59Pivotal Software Cloud Foundry Elastic Runtime 1.6.57Pivotal Software Cloud Foundry Elastic Runtime 1.6.50Pivotal Software Cloud Foundry Elastic Runtime 1.6.48Pivotal Software Cloud Foundry Elastic Runtime 1.6.41Pivotal Software Cloud Foundry Elastic Runtime 1.6.39Pivotal Software Cloud Foundry Elastic Runtime 1.6.34Pivotal Software Cloud Foundry Elastic Runtime 1.6.32
9.8
CVSSv3
CVE-2017-4955
An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.65, 1.7.x versions before 1.7.48, 1.8.x versions before 1.8.28, and 1.9.x versions before 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
Pivotal Software Cloud Foundry Elastic Runtime 1.9.2Pivotal Software Cloud Foundry Elastic Runtime 1.9.1Pivotal Software Cloud Foundry Elastic Runtime 1.8.27Pivotal Software Cloud Foundry Elastic Runtime 1.8.26Pivotal Software Cloud Foundry Elastic Runtime 1.8.12Pivotal Software Cloud Foundry Elastic Runtime 1.8.11Pivotal Software Cloud Foundry Elastic Runtime 1.8.10Pivotal Software Cloud Foundry Elastic Runtime 1.8.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.42Pivotal Software Cloud Foundry Elastic Runtime 1.7.41Pivotal Software Cloud Foundry Elastic Runtime 1.7.40Pivotal Software Cloud Foundry Elastic Runtime 1.7.39Pivotal Software Cloud Foundry Elastic Runtime 1.7.26Pivotal Software Cloud Foundry Elastic Runtime 1.7.25Pivotal Software Cloud Foundry Elastic Runtime 1.7.24Pivotal Software Cloud Foundry Elastic Runtime 1.7.23Pivotal Software Cloud Foundry Elastic Runtime 1.7.22Pivotal Software Cloud Foundry Elastic Runtime 1.7.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.8Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.56
9.8
CVSSv3
CVE-2016-0761
Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version before 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other containe...
Cloudfoundry Garden LinuxPivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.1Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.6.3Pivotal Software Cloud Foundry Elastic Runtime 1.6.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.8Pivotal Software Cloud Foundry Elastic Runtime 1.6.9Pivotal Software Cloud Foundry Elastic Runtime 1.6.10Pivotal Software Cloud Foundry Elastic Runtime 1.6.11Pivotal Software Cloud Foundry Elastic Runtime 1.6.12Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.16
7.5
CVSSv3
CVE-2016-0780
It exists that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions before 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions before 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota v...
Cloudfoundry Cf-release 231Pivotal Software Cloud Foundry Elastic Runtime 1.5.0Pivotal Software Cloud Foundry Elastic Runtime 1.5.1Pivotal Software Cloud Foundry Elastic Runtime 1.5.2Pivotal Software Cloud Foundry Elastic Runtime 1.5.3Pivotal Software Cloud Foundry Elastic Runtime 1.5.4Pivotal Software Cloud Foundry Elastic Runtime 1.5.5Pivotal Software Cloud Foundry Elastic Runtime 1.5.6Pivotal Software Cloud Foundry Elastic Runtime 1.5.7Pivotal Software Cloud Foundry Elastic Runtime 1.5.8Pivotal Software Cloud Foundry Elastic Runtime 1.5.9Pivotal Software Cloud Foundry Elastic Runtime 1.5.10Pivotal Software Cloud Foundry Elastic Runtime 1.5.11Pivotal Software Cloud Foundry Elastic Runtime 1.5.12Pivotal Software Cloud Foundry Elastic Runtime 1.5.13Pivotal Software Cloud Foundry Elastic Runtime 1.5.14Pivotal Software Cloud Foundry Elastic Runtime 1.5.15Pivotal Software Cloud Foundry Elastic Runtime 1.5.16Pivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.1Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.6.3
6.1
CVSSv3
CVE-2016-0781
The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions before 1.6.20 are vulnerable to an XSS attack by specifying malicious java script ...
Pivotal Software Cloud Foundry Elastic Runtime 1.6.3Pivotal Software Cloud Foundry Elastic Runtime 1.6.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.19Pivotal Software Cloud Foundry Uaa 3.0.0Pivotal Software Cloud Foundry Uaa 3.0.1Pivotal Software Cloud Foundry Uaa 3.1.0Pivotal Software Cloud Foundry 219Pivotal Software Cloud Foundry 220Pivotal Software Cloud Foundry 221Pivotal Software Cloud Foundry 222Pivotal Software Login-server -Cloudfoundry Cloud Foundry Uaa Bosh 6Pivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.9Pivotal Software Cloud Foundry Elastic Runtime 1.6.16Pivotal Software Cloud Foundry Elastic Runtime 1.6.18Pivotal Software Cloud Foundry Uaa 3.2.0Pivotal Software Cloud Foundry 208
6.5
CVSSv3
CVE-2016-2165
The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic Runtime versions before 1.5.19 AND 1.6.x versions before 1.6.20 are not cleansing request URL paths when they are invalid and are returning them in the 404 response. This could allow malici...
Cloudfoundry Cf-releasePivotal Software Cloud Foundry Elastic RuntimePivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.1Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.6.3Pivotal Software Cloud Foundry Elastic Runtime 1.6.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.8Pivotal Software Cloud Foundry Elastic Runtime 1.6.9Pivotal Software Cloud Foundry Elastic Runtime 1.6.10Pivotal Software Cloud Foundry Elastic Runtime 1.6.11Pivotal Software Cloud Foundry Elastic Runtime 1.6.12Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.16Pivotal Software Cloud Foundry Elastic Runtime 1.6.17Pivotal Software Cloud Foundry Elastic Runtime 1.6.18Pivotal Software Cloud Foundry Elastic Runtime 1.6.19
8.8
CVSSv3
CVE-2016-4468
SQL injection vulnerability in Pivotal Cloud Foundry (PCF) prior to 238; UAA 2.x prior to 2.7.4.4, 3.x prior to 3.3.0.2, and 3.4.x prior to 3.4.1; UAA BOSH prior to 11.2 and 12.x prior to 12.2; Elastic Runtime prior to 1.6.29 and 1.7.x prior to 1.7.7; and Ops Manager 1.7.x prior ...
Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud FoundryPivotal Software Cloud Foundry Elastic Runtime 1.8.0Pivotal Software Cloud Foundry UaaPivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.7.1Pivotal Software Cloud Foundry Ops Manager 1.7.3Pivotal Software Cloud Foundry Ops Manager 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.9Pivotal Software Cloud Foundry Elastic Runtime 1.6.22Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.25Pivotal Software Cloud Foundry Elastic Runtime 1.6.17Pivotal Software Cloud Foundry Elastic Runtime 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.10Pivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.20Pivotal Software Cloud Foundry Elastic Runtime 1.6.2
8.8
CVSSv3
CVE-2016-6651
The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) prior to 243; UAA 2.x prior to 2.7.4.8, 3.x prior to 3.3.0.6, and 3.4.x prior to 3.4.5; UAA BOSH prior to 11.7 and 12.x prior to 12.6; Elastic Runtime prior to 1.6.40, 1.7.x prior to 1.7.21, and 1.8.x prior to 1.8.2; an...
Pivotal Software Cloud Foundry Ops Manager 1.7.7Pivotal Software Cloud Foundry Ops Manager 1.7.6Pivotal Software Cloud Foundry Ops Manager 1.8.0Pivotal Software Cloud Foundry Elastic Runtime 1.8.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.33Pivotal Software Cloud Foundry Elastic Runtime 1.6.32Pivotal Software Cloud Foundry Elastic Runtime 1.6.31Pivotal Software Cloud Foundry Elastic Runtime 1.6.23Pivotal Software Cloud Foundry Elastic Runtime 1.6.22Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.4Pivotal Software Cloud Foundry Elastic Runtime 1.7.18Pivotal Software Cloud Foundry Elastic Runtime 1.7.17Pivotal Software Cloud Foundry Elastic Runtime 1.7.10Pivotal Software Cloud Foundry Elastic Runtime 1.7.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.1Pivotal Software Cloud Foundry Elastic Runtime 1.7.0Pivotal Software Cloud Foundry Ops Manager 1.7.11Pivotal Software Cloud Foundry Ops Manager 1.7.10Pivotal Software Cloud Foundry Ops Manager 1.7.3
5.3
CVSSv3
CVE-2016-6636
The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) prior to 242; UAA 2.x prior to 2.7.4.7, 3.x prior to 3.3.0.5, and 3.4.x prior to 3.4.4; UAA BOSH prior to 11.5 and 12.x prior to 12.5; Elastic Runtime prior to 1.6.40, 1.7.x prior to 1.7.21, and 1.8.x prior to ...
Pivotal Software Cloud Foundry Ops Manager 1.7.12Pivotal Software Cloud Foundry Ops Manager 1.7.5Pivotal Software Cloud Foundry Ops Manager 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.39Pivotal Software Cloud Foundry Elastic Runtime 1.6.38Pivotal Software Cloud Foundry Elastic Runtime 1.6.30Pivotal Software Cloud Foundry Elastic Runtime 1.6.29Pivotal Software Cloud Foundry Elastic Runtime 1.6.21Pivotal Software Cloud Foundry Elastic Runtime 1.6.20Pivotal Software Cloud Foundry Elastic Runtime 1.6.12Pivotal Software Cloud Foundry Elastic Runtime 1.6.11Pivotal Software Cloud Foundry Elastic Runtime 1.6.3Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.7.16Pivotal Software Cloud Foundry Elastic Runtime 1.7.15Pivotal Software Cloud Foundry Elastic Runtime 1.7.8Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Cloudfoundry Cloud Foundry Uaa BoshPivotal Software Cloud Foundry Uaa 2.3.0Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 2.7.2
9.6
CVSSv3
CVE-2016-6637
Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) prior to 242; UAA 2.x prior to 2.7.4.7, 3.x prior to 3.3.0.5, and 3.4.x prior to 3.4.4; UAA BOSH prior to 11.5 and 12.x prior to 12.5; Elastic Runtime prior to 1.6.40, 1.7.x prior to 1.7.21,...
Pivotal Software Cloud Foundry Ops Manager 1.7.9Pivotal Software Cloud Foundry Ops Manager 1.7.8Pivotal Software Cloud Foundry Ops Manager 1.7.1Pivotal Software Cloud Foundry Ops Manager 1.7.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.34Pivotal Software Cloud Foundry Elastic Runtime 1.6.33Pivotal Software Cloud Foundry Elastic Runtime 1.6.26Pivotal Software Cloud Foundry Elastic Runtime 1.6.25Pivotal Software Cloud Foundry Elastic Runtime 1.6.17Pivotal Software Cloud Foundry Elastic Runtime 1.6.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.7.20Pivotal Software Cloud Foundry Elastic Runtime 1.7.19Pivotal Software Cloud Foundry Elastic Runtime 1.7.12Pivotal Software Cloud Foundry Elastic Runtime 1.7.11Pivotal Software Cloud Foundry Elastic Runtime 1.7.10Pivotal Software Cloud Foundry Elastic Runtime 1.7.3Pivotal Software Cloud Foundry Elastic Runtime 1.7.2Pivotal Software Cloud Foundry Uaa 2.5.1Pivotal Software Cloud Foundry Uaa 2.6.1Pivotal Software Cloud Foundry Uaa 3.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook