Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

pivotal software cloudfoundry uaa vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2018-11082
Cloud Foundry UAA, all versions before 4.20.0 and Cloud Foundry UAA Release, all versions before 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.
Pivotal Software Cloudfoundry Uaa ReleasePivotal Software Cloudfoundry Uaa
7.5
CVSSv3
CVE-2017-4972
An issue exists in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior...
Pivotal Software Cloud Foundry Uaa 3.6.6Pivotal Software Cloud Foundry Uaa 3.6.4Pivotal Software Cloud Foundry Uaa 3.9.8Pivotal Software Cloud Foundry Uaa 3.9.5Pivotal Software Cloud Foundry Uaa 2.7.4.13Pivotal Software Cloud Foundry Uaa 2.2.5.4Pivotal Software Cloud Foundry Uaa 2.7.4.4Pivotal Software Cloud Foundry Uaa 3.6.9Pivotal Software Cloud Foundry Uaa 2.7.4.5Pivotal Software Cloud Foundry Uaa 2.7.4.3Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 2.7.3Pivotal Software Cloud Foundry Uaa 2.7.4Pivotal Software Cloud Foundry Uaa 2.7.4.1Pivotal Software Cloud Foundry Uaa 2.7.4.2Pivotal Software Cloud Foundry Uaa 2.7.4.7Pivotal Software Cloud Foundry Uaa 2.7.4.8Pivotal Software Cloud Foundry Uaa 2.7.4.12Pivotal Software Cloud Foundry Uaa 3.6.2Pivotal Software Cloud Foundry Uaa 3.6.3Pivotal Software Cloud Foundry Uaa 3.6.5Pivotal Software Cloud Foundry Uaa 3.6.7
9.8
CVSSv3
CVE-2017-4992
An issue exists in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior...
Pivotal Software Cloud Foundry Uaa 3.6.10Pivotal Software Cloud Foundry Uaa 2.7.4.15Pivotal Software Cloud Foundry Uaa 3.6.6Pivotal Software Cloud Foundry Uaa 3.6.4Pivotal Software Cloud Foundry Uaa 3.9.8Pivotal Software Cloud Foundry Uaa 3.9.5Pivotal Software Cloud Foundry Uaa 2.7.4.13Pivotal Software Cloud Foundry Uaa 2.2.5.4Pivotal Software Cloud Foundry Uaa 2.7.4.4Pivotal Software Cloud Foundry Uaa 3.6.9Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 2.7.3Pivotal Software Cloud Foundry Uaa 2.7.4.2Pivotal Software Cloud Foundry Uaa 2.7.4.3Pivotal Software Cloud Foundry Uaa 2.7.4.5Pivotal Software Cloud Foundry Uaa 2.7.4.7Pivotal Software Cloud Foundry Uaa 2.7.4.12Pivotal Software Cloud Foundry Uaa 2.7.4.16Pivotal Software Cloud Foundry Uaa 3.6.2Pivotal Software Cloud Foundry Uaa 3.6.5Pivotal Software Cloud Foundry Uaa 3.6.7Pivotal Software Cloud Foundry Uaa 3.6.8
7.5
CVSSv3
CVE-2017-4994
An issue exists in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14, and other versions prior to v4.3.0; and UAA bosh release (uaa-release) 13.x versions prior...
Cloudfoundry Cloud Foundry Uaa Bosh 24.2Cloudfoundry Cloud Foundry Uaa Bosh 24.3Cloudfoundry Cloud Foundry Uaa Bosh 24.4Cloudfoundry Cloud Foundry Uaa Bosh 24.5Cloudfoundry Cloud Foundry Uaa Bosh 13.8Cloudfoundry Cloud Foundry Uaa Bosh 13.9Cloudfoundry Cloud Foundry Uaa Bosh 13.10Cloudfoundry Cloud Foundry Uaa BoshCloudfoundry Cloud Foundry Uaa Bosh 24Cloudfoundry Cloud Foundry Uaa Bosh 30Cloudfoundry Cloud Foundry Uaa Bosh 24.10Pivotal Software Cloud Foundry CfCloudfoundry Cloud Foundry Uaa Bosh 13.1Cloudfoundry Cloud Foundry Uaa Bosh 13.2Cloudfoundry Cloud Foundry Uaa Bosh 13.3Pivotal Software Cloud Foundry UaaPivotal Software Cloud Foundry Uaa 3.9.12Pivotal Software Cloud Foundry Uaa 3.9.13Pivotal Software Cloud Foundry Uaa 3.9.1Pivotal Software Cloud Foundry Uaa 3.6.4Pivotal Software Cloud Foundry Uaa 3.6.5Pivotal Software Cloud Foundry Uaa 3.6.6
7.2
CVSSv3
CVE-2017-4991
An issue exists in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release (uaa-release) 13.x versions prio...
Pivotal Software Cloud Foundry Uaa 2.7.4.15Pivotal Software Cloud Foundry Uaa 3.6.6Pivotal Software Cloud Foundry Uaa 3.6.4Pivotal Software Cloud Foundry Uaa 3.9.8Pivotal Software Cloud Foundry Uaa 3.9.5Pivotal Software Cloud Foundry Uaa 2.7.4.13Pivotal Software Cloud Foundry Uaa 2.2.5.4Pivotal Software Cloud Foundry Uaa 2.7.4.4Pivotal Software Cloud Foundry Uaa 3.6.9Pivotal Software Cloud Foundry Uaa 2.7.4.5Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 2.7.3Pivotal Software Cloud Foundry Uaa 2.7.4Pivotal Software Cloud Foundry Uaa 2.7.4.1Pivotal Software Cloud Foundry Uaa 2.7.4.2Pivotal Software Cloud Foundry Uaa 2.7.4.3Pivotal Software Cloud Foundry Uaa 2.7.4.7Pivotal Software Cloud Foundry Uaa 2.7.4.8Pivotal Software Cloud Foundry Uaa 2.7.4.12Pivotal Software Cloud Foundry Uaa 3.6.2Pivotal Software Cloud Foundry Uaa 3.6.3Pivotal Software Cloud Foundry Uaa 3.6.5
6.6
CVSSv3
CVE-2017-8032
In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-release) 13.x versions pri...
Pivotal Software Cloud Foundry Uaa 2.2.5.4Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 2.7.2Pivotal Software Cloud Foundry Uaa 2.7.3Pivotal Software Cloud Foundry Uaa 2.7.4.14Pivotal Software Cloud Foundry Uaa 2.7.4.15Pivotal Software Cloud Foundry Uaa 2.7.4.16Pivotal Software Cloud Foundry Uaa 3.6.1Pivotal Software Cloud Foundry Uaa 3.9.3Pivotal Software Cloud Foundry Uaa 3.9.4Pivotal Software Cloud Foundry Uaa 3.9.5Pivotal Software Cloud Foundry Uaa 3.9.6Pivotal Software Cloud Foundry Uaa 2.7.4Pivotal Software Cloud Foundry Uaa 2.7.4.2Pivotal Software Cloud Foundry Uaa 2.7.4.4Pivotal Software Cloud Foundry Uaa 2.7.4.9Pivotal Software Cloud Foundry Uaa 2.7.4.12Pivotal Software Cloud Foundry Uaa 3.6.3Pivotal Software Cloud Foundry Uaa 3.6.5Pivotal Software Cloud Foundry Uaa 3.6.12Pivotal Software Cloud Foundry Uaa 3.9.2Pivotal Software Cloud Foundry Uaa 3.9.7
6.5
CVSSv3
CVE-2017-4974
An issue exists in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior...
Pivotal Software Cloud Foundry Uaa 3.6.6Pivotal Software Cloud Foundry Uaa 3.6.4Pivotal Software Cloud Foundry Uaa 3.9.8Pivotal Software Cloud Foundry Uaa 3.9.5Pivotal Software Cloud Foundry Uaa 2.7.4.13Pivotal Software Cloud Foundry Uaa 2.2.5.4Pivotal Software Cloud Foundry Uaa 2.7.4.4Pivotal Software Cloud Foundry Uaa 2.7.4.5Pivotal Software Cloud Foundry Uaa 3.9.10Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 2.7.3Pivotal Software Cloud Foundry Uaa 2.7.4Pivotal Software Cloud Foundry Uaa 2.7.4.1Pivotal Software Cloud Foundry Uaa 2.7.4.2Pivotal Software Cloud Foundry Uaa 2.7.4.3Pivotal Software Cloud Foundry Uaa 2.7.4.7Pivotal Software Cloud Foundry Uaa 2.7.4.12Pivotal Software Cloud Foundry Uaa 3.6.2Pivotal Software Cloud Foundry Uaa 3.6.5Pivotal Software Cloud Foundry Uaa 3.6.7Pivotal Software Cloud Foundry Uaa 3.6.8Pivotal Software Cloud Foundry Uaa 3.9.2
8.8
CVSSv3
CVE-2017-4973
An issue exists in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior...
Cloudfoundry Cloud Foundry Uaa Bosh 30.3Cloudfoundry Cloud Foundry Uaa Bosh 24.2Cloudfoundry Cloud Foundry Uaa Bosh 24.4Cloudfoundry Cloud Foundry Uaa Bosh 13.2Cloudfoundry Cloud Foundry Uaa Bosh 13.4Cloudfoundry Cloud Foundry Uaa Bosh 13.11Pivotal Software Cloud Foundry Uaa 3.9.13Pivotal Software Cloud Foundry Uaa 3.9.5Pivotal Software Cloud Foundry Uaa 3.9.7Pivotal Software Cloud Foundry Uaa 3.9.9Pivotal Software Cloud Foundry Uaa 3.6.5Pivotal Software Cloud Foundry Uaa 3.6.7Pivotal Software Cloud Foundry Uaa 2.7.4.7Pivotal Software Cloud Foundry Uaa 2.7.4.5Pivotal Software Cloud Foundry Uaa 2.7.4.9Pivotal Software Cloud Foundry Uaa 2.7.4.12Cloudfoundry Cloud Foundry Uaa Bosh 24.5Cloudfoundry Cloud Foundry Uaa Bosh 24.6Pivotal Software Cloud Foundry CfCloudfoundry Cloud Foundry Uaa Bosh 13.1Pivotal Software Cloud Foundry Uaa 3.9.1Pivotal Software Cloud Foundry Uaa 3.9.2
7.5
CVSSv3
CVE-2017-4960
An issue exists in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.
Pivotal Software Cloud Foundry Uaa 3.10.0Pivotal Software Cloud Foundry Uaa 3.9.6Pivotal Software Cloud Foundry Uaa 3.9.8Cloudfoundry Cloud Foundry Uaa Bosh 24.3Cloudfoundry Cloud Foundry Uaa Bosh 24.5Pivotal Software Cloud Foundry 250.0Pivotal Software Cloud Foundry 248.0Cloudfoundry Cloud Foundry Uaa Bosh 22Cloudfoundry Cloud Foundry Uaa Bosh 23Cloudfoundry Cloud Foundry Uaa Bosh 24Cloudfoundry Cloud Foundry Uaa Bosh 24.1Pivotal Software Cloud Foundry 252.0Pivotal Software Cloud Foundry Uaa 3.9.0Pivotal Software Cloud Foundry Uaa 3.9.1Pivotal Software Cloud Foundry Uaa 3.9.2Pivotal Software Cloud Foundry Uaa 3.9.3Pivotal Software Cloud Foundry Uaa 3.9.4Pivotal Software Cloud Foundry Uaa 3.9.5Cloudfoundry Cloud Foundry Uaa Bosh 24.6Cloudfoundry Cloud Foundry Uaa Bosh 25Cloudfoundry Cloud Foundry Uaa Bosh 26Pivotal Software Cloud Foundry 251.0
8.8
CVSSv3
CVE-2018-15761
Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions before 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalate...
Pivotal Software Cloud Foundry UaaPivotal Software Cloudfoundry Uaa Release
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook