Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

pivotal software vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2018-1273

Spring Data Commons, versions before 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted r...
Pivotal Software Spring Data CommonsPivotal Software Spring Data RestApache Ignite 1.0.0Apache Ignite
9.8
CVSSv3

CVE-2016-9880

The GemFire broker for Cloud Foundry 1.6.x prior to 1.6.5 and 1.7.x prior to 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.
Pivotal Software Gemfire For Pivotal Cloud FoundryPivotal Software Gemfire For Pivotal Cloud Foundry 1.7.0
9.8
CVSSv3

CVE-2017-8045

In Pivotal Spring AMQP versions before 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
Pivotal Software Spring Advanced Message Queuing Protocol 1.7.3Pivotal Software Spring Advanced Message Queuing Protocol 1.7.2Pivotal Software Spring Advanced Message Queuing Protocol 1.7.1Pivotal Software Spring Advanced Message Queuing Protocol 1.7.0Pivotal Software Spring Advanced Message Queuing Protocol 1.6.0Pivotal Software Spring Advanced Message Queuing Protocol 1.6.1Pivotal Software Spring Advanced Message Queuing Protocol 1.6.2Pivotal Software Spring Advanced Message Queuing Protocol 1.6.3Pivotal Software Spring Advanced Message Queuing Protocol 1.6.4Pivotal Software Spring Advanced Message Queuing Protocol 1.6.5Pivotal Software Spring Advanced Message Queuing Protocol 1.6.6Pivotal Software Spring Advanced Message Queuing Protocol 1.6.7Pivotal Software Spring Advanced Message Queuing Protocol 1.6.8Pivotal Software Spring Advanced Message Queuing Protocol 1.6.9Pivotal Software Spring Advanced Message Queuing Protocol 1.6.10Pivotal Software Spring Advanced Message Queuing Protocol 1.5.0Pivotal Software Spring Advanced Message Queuing Protocol 1.5.1Pivotal Software Spring Advanced Message Queuing Protocol 1.5.2Pivotal Software Spring Advanced Message Queuing Protocol 1.5.3Pivotal Software Spring Advanced Message Queuing Protocol 1.5.4Pivotal Software Spring Advanced Message Queuing Protocol 1.5.5Pivotal Software Spring Advanced Message Queuing Protocol 1.5.6
9.8
CVSSv3

CVE-2015-5171

The password change functionality in Cloud Foundry Runtime cf-release prior to 216, UAA prior to 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.7.0 allow malicious users to have unspecified impact by leveraging failure to expire existing sessions.
Pivotal Software Cloud Foundry Elastic RuntimePivotal Software Cloud Foundry UaaCloudfoundry Cf-release
9.8
CVSSv3

CVE-2015-5172

Cloud Foundry Runtime cf-release prior to 216, UAA prior to 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.7.0 allow malicious users to have unspecified impact by leveraging failure to expire password reset links.
Pivotal Software Cloud Foundry Elastic RuntimePivotal Software Cloud Foundry UaaCloudfoundry Cf-release
9.8
CVSSv3

CVE-2017-2773

An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.60, 1.7.x versions before 1.7.41, 1.8.x versions before 1.8.23, and 1.9.x versions before 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged malicious users to impers...
Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.49Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.8.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.24Pivotal Software Cloud Foundry Elastic Runtime 1.8.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.56Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.54Pivotal Software Cloud Foundry Elastic Runtime 1.7.23Pivotal Software Cloud Foundry Elastic Runtime 1.7.37Pivotal Software Cloud Foundry Elastic Runtime 1.6.51Pivotal Software Cloud Foundry Elastic Runtime 1.6.43Pivotal Software Cloud Foundry Elastic Runtime 1.8.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.8.11Pivotal Software Cloud Foundry Elastic Runtime 1.8.21Pivotal Software Cloud Foundry Elastic Runtime 1.6.57Pivotal Software Cloud Foundry Elastic Runtime 1.8.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.31Pivotal Software Cloud Foundry Elastic Runtime 1.6.52
9.8
CVSSv3

CVE-2017-4992

An issue exists in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa-release) 13.x versions prior...
Pivotal Software Cloud Foundry Uaa 3.6.10Pivotal Software Cloud Foundry Uaa 2.7.4.15Pivotal Software Cloud Foundry Uaa 3.6.6Pivotal Software Cloud Foundry Uaa 3.6.4Pivotal Software Cloud Foundry Uaa 3.9.8Pivotal Software Cloud Foundry Uaa 3.9.5Pivotal Software Cloud Foundry Uaa 2.7.4.13Pivotal Software Cloud Foundry Uaa 2.2.5.4Pivotal Software Cloud Foundry Uaa 2.7.4.4Pivotal Software Cloud Foundry Uaa 3.6.9Pivotal Software Cloud Foundry Uaa 2.7.4.5Pivotal Software Cloud Foundry Uaa 3.9.11Pivotal Software Cloud Foundry Uaa 3.9.10Pivotal Software Cloud Foundry Uaa 2.7.4.3Pivotal Software Cloud Foundry Uaa 3.9.13Pivotal Software Cloud Foundry Uaa 3.6.5Pivotal Software Cloud Foundry Uaa 3.9.6Pivotal Software Cloud Foundry Uaa 3.6.7Pivotal Software Cloud Foundry Uaa 2.7.1Pivotal Software Cloud Foundry Uaa 3.9.9Pivotal Software Cloud Foundry Uaa 2.7.4.16Pivotal Software Cloud Foundry Uaa 2.7.4.2
9.8
CVSSv3

CVE-2017-4955

An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.65, 1.7.x versions before 1.7.48, 1.8.x versions before 1.8.28, and 1.9.x versions before 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.7.44Pivotal Software Cloud Foundry Elastic Runtime 1.7.43Pivotal Software Cloud Foundry Elastic Runtime 1.6.49Pivotal Software Cloud Foundry Elastic Runtime 1.9.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.9.2Pivotal Software Cloud Foundry Elastic Runtime 1.8.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.24Pivotal Software Cloud Foundry Elastic Runtime 1.8.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.56Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.54Pivotal Software Cloud Foundry Elastic Runtime 1.7.23Pivotal Software Cloud Foundry Elastic Runtime 1.7.37Pivotal Software Cloud Foundry Elastic Runtime 1.6.51Pivotal Software Cloud Foundry Elastic Runtime 1.9.1Pivotal Software Cloud Foundry Elastic Runtime 1.6.43Pivotal Software Cloud Foundry Elastic Runtime 1.8.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.8.11
9.8
CVSSv3

CVE-2016-0761

Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version before 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other containe...
Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.9Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.10Pivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.6.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.3Pivotal Software Cloud Foundry Elastic Runtime 1.6.11Pivotal Software Cloud Foundry Elastic Runtime 1.6.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.12Pivotal Software Cloud Foundry Elastic Runtime 1.6.16Pivotal Software Cloud Foundry Elastic Runtime 1.6.8Pivotal Software Cloud Foundry Elastic Runtime 1.6.1Cloudfoundry Garden Linux
9.8
CVSSv3

CVE-2016-5006

The Cloud Controller in Cloud Foundry prior to 239 logs user-provided service objects at creation, which allows malicious users to obtain sensitive user credential information via unspecified vectors.
Pivotal Software Cloud Foundry Elastic Runtime 1.7.6Pivotal Software Cloud Foundry Elastic Runtime 1.7.1Pivotal Software Cloud Foundry Elastic Runtime 1.7.10Pivotal Software Cloud Foundry Elastic Runtime 1.7.4Pivotal Software Cloud Foundry Elastic Runtime 1.7.7Pivotal Software Cloud Foundry Elastic Runtime 1.7.0Pivotal Software Cloud Foundry Elastic Runtime 1.7.8Pivotal Software Cloud Foundry Elastic Runtime 1.7.5Pivotal Software Cloud FoundryPivotal Software Cloud Foundry Elastic Runtime 1.7.9Pivotal Software Cloud Foundry Elastic Runtime 1.7.3Pivotal Software Cloud Foundry Elastic Runtime 1.7.2Pivotal Software Cloud Foundry Elastic Runtime
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRFserver-side request forgeryCVE-2024-30067CVE-2024-5553CVE-2024-30095IDORCVE-2024-35252CVE-2024-23692CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook