Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

pivotal software cloud foundry elastic runtime 1.7.7 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2017-2773
An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.60, 1.7.x versions before 1.7.41, 1.8.x versions before 1.8.23, and 1.9.x versions before 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged malicious users to impers...
Pivotal Software Cloud Foundry Elastic Runtime 1.8.17Pivotal Software Cloud Foundry Elastic Runtime 1.8.15Pivotal Software Cloud Foundry Elastic Runtime 1.8.10Pivotal Software Cloud Foundry Elastic Runtime 1.8.8Pivotal Software Cloud Foundry Elastic Runtime 1.8.1Pivotal Software Cloud Foundry Elastic Runtime 1.7.39Pivotal Software Cloud Foundry Elastic Runtime 1.7.32Pivotal Software Cloud Foundry Elastic Runtime 1.7.30Pivotal Software Cloud Foundry Elastic Runtime 1.7.25Pivotal Software Cloud Foundry Elastic Runtime 1.7.23Pivotal Software Cloud Foundry Elastic Runtime 1.7.16Pivotal Software Cloud Foundry Elastic Runtime 1.7.14Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.59Pivotal Software Cloud Foundry Elastic Runtime 1.6.57Pivotal Software Cloud Foundry Elastic Runtime 1.6.50Pivotal Software Cloud Foundry Elastic Runtime 1.6.48Pivotal Software Cloud Foundry Elastic Runtime 1.6.41Pivotal Software Cloud Foundry Elastic Runtime 1.6.39Pivotal Software Cloud Foundry Elastic Runtime 1.6.34Pivotal Software Cloud Foundry Elastic Runtime 1.6.32
9.8
CVSSv3
CVE-2017-4955
An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.65, 1.7.x versions before 1.7.48, 1.8.x versions before 1.8.28, and 1.9.x versions before 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
Pivotal Software Cloud Foundry Elastic Runtime 1.9.2Pivotal Software Cloud Foundry Elastic Runtime 1.9.1Pivotal Software Cloud Foundry Elastic Runtime 1.8.27Pivotal Software Cloud Foundry Elastic Runtime 1.8.26Pivotal Software Cloud Foundry Elastic Runtime 1.8.12Pivotal Software Cloud Foundry Elastic Runtime 1.8.11Pivotal Software Cloud Foundry Elastic Runtime 1.8.10Pivotal Software Cloud Foundry Elastic Runtime 1.8.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.42Pivotal Software Cloud Foundry Elastic Runtime 1.7.41Pivotal Software Cloud Foundry Elastic Runtime 1.7.40Pivotal Software Cloud Foundry Elastic Runtime 1.7.39Pivotal Software Cloud Foundry Elastic Runtime 1.7.26Pivotal Software Cloud Foundry Elastic Runtime 1.7.25Pivotal Software Cloud Foundry Elastic Runtime 1.7.24Pivotal Software Cloud Foundry Elastic Runtime 1.7.23Pivotal Software Cloud Foundry Elastic Runtime 1.7.22Pivotal Software Cloud Foundry Elastic Runtime 1.7.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.8Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.56
9.8
CVSSv3
CVE-2016-5006
The Cloud Controller in Cloud Foundry prior to 239 logs user-provided service objects at creation, which allows malicious users to obtain sensitive user credential information via unspecified vectors.
Pivotal Software Cloud Foundry Elastic Runtime 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic RuntimePivotal Software Cloud Foundry Elastic Runtime 1.7.0Pivotal Software Cloud Foundry Elastic Runtime 1.7.1Pivotal Software Cloud Foundry Elastic Runtime 1.7.2Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.8Pivotal Software Cloud Foundry Elastic Runtime 1.7.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.10Pivotal Software Cloud Foundry Elastic Runtime 1.7.3Pivotal Software Cloud Foundry Elastic Runtime 1.7.5Pivotal Software Cloud Foundry
8.8
CVSSv3
CVE-2016-4468
SQL injection vulnerability in Pivotal Cloud Foundry (PCF) prior to 238; UAA 2.x prior to 2.7.4.4, 3.x prior to 3.3.0.2, and 3.4.x prior to 3.4.1; UAA BOSH prior to 11.2 and 12.x prior to 12.2; Elastic Runtime prior to 1.6.29 and 1.7.x prior to 1.7.7; and Ops Manager 1.7.x prior ...
Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud FoundryPivotal Software Cloud Foundry Elastic Runtime 1.8.0Pivotal Software Cloud Foundry UaaPivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.7.1Pivotal Software Cloud Foundry Ops Manager 1.7.3Pivotal Software Cloud Foundry Ops Manager 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.9Pivotal Software Cloud Foundry Elastic Runtime 1.6.22Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.25Pivotal Software Cloud Foundry Elastic Runtime 1.6.17Pivotal Software Cloud Foundry Elastic Runtime 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.10Pivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.20Pivotal Software Cloud Foundry Elastic Runtime 1.6.2
7.4
CVSSv3
CVE-2016-6657
An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should apply the following mitigation: Upgrade PCF Elastic Runtime 1.8.x versions to 1.8.12 or later. Upgrade PCF Ops Manager 1.7.x versions to ...
Pivotal Software Cloud Foundry Ops Manager 1.8.3Pivotal Software Cloud Foundry Ops Manager 1.8.4Pivotal Software Cloud Foundry Ops Manager 1.8.5Pivotal Software Cloud Foundry Ops Manager 1.8.6Pivotal Software Cloud Foundry Ops Manager 1.7.10Pivotal Software Cloud Foundry Ops Manager 1.7.11Pivotal Software Cloud Foundry Ops Manager 1.7.12Pivotal Software Cloud Foundry Ops Manager 1.7.2Pivotal Software Cloud Foundry Ops Manager 1.8.0Pivotal Software Cloud Foundry Ops Manager 1.7.13Pivotal Software Cloud Foundry Ops Manager 1.7.14Pivotal Software Cloud Foundry Ops Manager 1.7.15Pivotal Software Cloud Foundry Ops Manager 1.7.7Pivotal Software Cloud Foundry Ops Manager 1.7.8Pivotal Software Cloud Foundry Ops Manager 1.7.9Pivotal Software Cloud Foundry Ops Manager 1.8.1Pivotal Software Cloud Foundry Ops Manager 1.8.8Pivotal Software Cloud Foundry Ops Manager 1.8.10Pivotal Software Cloud Foundry Ops Manager 1.7.16Pivotal Software Cloud Foundry Ops Manager 1.7.18Pivotal Software Cloud Foundry Ops Manager 1.7.1Pivotal Software Cloud Foundry Ops Manager 1.7.3
8.8
CVSSv3
CVE-2016-6651
The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) prior to 243; UAA 2.x prior to 2.7.4.8, 3.x prior to 3.3.0.6, and 3.4.x prior to 3.4.5; UAA BOSH prior to 11.7 and 12.x prior to 12.6; Elastic Runtime prior to 1.6.40, 1.7.x prior to 1.7.21, and 1.8.x prior to 1.8.2; an...
Pivotal Software Cloud Foundry Ops Manager 1.7.7Pivotal Software Cloud Foundry Ops Manager 1.7.6Pivotal Software Cloud Foundry Ops Manager 1.8.0Pivotal Software Cloud Foundry Elastic Runtime 1.8.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.33Pivotal Software Cloud Foundry Elastic Runtime 1.6.32Pivotal Software Cloud Foundry Elastic Runtime 1.6.31Pivotal Software Cloud Foundry Elastic Runtime 1.6.23Pivotal Software Cloud Foundry Elastic Runtime 1.6.22Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.4Pivotal Software Cloud Foundry Elastic Runtime 1.7.18Pivotal Software Cloud Foundry Elastic Runtime 1.7.17Pivotal Software Cloud Foundry Elastic Runtime 1.7.10Pivotal Software Cloud Foundry Elastic Runtime 1.7.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.1Pivotal Software Cloud Foundry Elastic Runtime 1.7.0Pivotal Software Cloud Foundry Ops Manager 1.7.11Pivotal Software Cloud Foundry Ops Manager 1.7.10Pivotal Software Cloud Foundry Ops Manager 1.7.3
5.3
CVSSv3
CVE-2016-6636
The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) prior to 242; UAA 2.x prior to 2.7.4.7, 3.x prior to 3.3.0.5, and 3.4.x prior to 3.4.4; UAA BOSH prior to 11.5 and 12.x prior to 12.5; Elastic Runtime prior to 1.6.40, 1.7.x prior to 1.7.21, and 1.8.x prior to ...
Pivotal Software Cloud Foundry Ops Manager 1.7.12Pivotal Software Cloud Foundry Ops Manager 1.7.5Pivotal Software Cloud Foundry Ops Manager 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.39Pivotal Software Cloud Foundry Elastic Runtime 1.6.38Pivotal Software Cloud Foundry Elastic Runtime 1.6.30Pivotal Software Cloud Foundry Elastic Runtime 1.6.29Pivotal Software Cloud Foundry Elastic Runtime 1.6.21Pivotal Software Cloud Foundry Elastic Runtime 1.6.20Pivotal Software Cloud Foundry Elastic Runtime 1.6.12Pivotal Software Cloud Foundry Elastic Runtime 1.6.11Pivotal Software Cloud Foundry Elastic Runtime 1.6.3Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.7.16Pivotal Software Cloud Foundry Elastic Runtime 1.7.15Pivotal Software Cloud Foundry Elastic Runtime 1.7.8Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Cloudfoundry Cloud Foundry Uaa BoshPivotal Software Cloud Foundry Uaa 2.3.0Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 2.7.2
9.6
CVSSv3
CVE-2016-6637
Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) prior to 242; UAA 2.x prior to 2.7.4.7, 3.x prior to 3.3.0.5, and 3.4.x prior to 3.4.4; UAA BOSH prior to 11.5 and 12.x prior to 12.5; Elastic Runtime prior to 1.6.40, 1.7.x prior to 1.7.21,...
Pivotal Software Cloud Foundry Ops Manager 1.7.9Pivotal Software Cloud Foundry Ops Manager 1.7.8Pivotal Software Cloud Foundry Ops Manager 1.7.1Pivotal Software Cloud Foundry Ops Manager 1.7.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.34Pivotal Software Cloud Foundry Elastic Runtime 1.6.33Pivotal Software Cloud Foundry Elastic Runtime 1.6.26Pivotal Software Cloud Foundry Elastic Runtime 1.6.25Pivotal Software Cloud Foundry Elastic Runtime 1.6.17Pivotal Software Cloud Foundry Elastic Runtime 1.6.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.7.20Pivotal Software Cloud Foundry Elastic Runtime 1.7.19Pivotal Software Cloud Foundry Elastic Runtime 1.7.12Pivotal Software Cloud Foundry Elastic Runtime 1.7.11Pivotal Software Cloud Foundry Elastic Runtime 1.7.10Pivotal Software Cloud Foundry Elastic Runtime 1.7.3Pivotal Software Cloud Foundry Elastic Runtime 1.7.2Pivotal Software Cloud Foundry Uaa 2.5.1Pivotal Software Cloud Foundry Uaa 2.6.1Pivotal Software Cloud Foundry Uaa 3.0.1
7.3
CVSSv3
CVE-2016-0896
Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.6.34 and 1.7.x prior to 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote malicious users to bypass intended network-connectivity restrictions by leveraging access to the 169.25...
Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.7.5Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.0Pivotal Software Cloud Foundry Elastic Runtime 1.7.1Pivotal Software Cloud Foundry Elastic Runtime 1.7.8Pivotal Software Cloud Foundry Elastic Runtime 1.7.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.10Pivotal Software Cloud Foundry Elastic Runtime 1.7.2Pivotal Software Cloud Foundry Elastic Runtime 1.7.3Pivotal Software Cloud Foundry Elastic Runtime 1.7.11Pivotal Software Cloud Foundry Elastic Runtime
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook