Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

pivotal software vulnerabilities and exploits

(subscribe to this query)
890
VMScore
CVE-2016-0761
Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version before 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other containe...
Cloudfoundry Garden LinuxPivotal Software Cloud Foundry Elastic Runtime 1.6.0Pivotal Software Cloud Foundry Elastic Runtime 1.6.1Pivotal Software Cloud Foundry Elastic Runtime 1.6.2Pivotal Software Cloud Foundry Elastic Runtime 1.6.3Pivotal Software Cloud Foundry Elastic Runtime 1.6.4Pivotal Software Cloud Foundry Elastic Runtime 1.6.5Pivotal Software Cloud Foundry Elastic Runtime 1.6.6Pivotal Software Cloud Foundry Elastic Runtime 1.6.7Pivotal Software Cloud Foundry Elastic Runtime 1.6.8Pivotal Software Cloud Foundry Elastic Runtime 1.6.9Pivotal Software Cloud Foundry Elastic Runtime 1.6.10Pivotal Software Cloud Foundry Elastic Runtime 1.6.11Pivotal Software Cloud Foundry Elastic Runtime 1.6.12Pivotal Software Cloud Foundry Elastic Runtime 1.6.13Pivotal Software Cloud Foundry Elastic Runtime 1.6.14Pivotal Software Cloud Foundry Elastic Runtime 1.6.15Pivotal Software Cloud Foundry Elastic Runtime 1.6.16
801
VMScore
CVE-2021-22112
Spring Security 5.4.x before 5.4.4, 5.3.x before 5.3.8.RELEASE, 5.2.x before 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programm...
Vmware Spring SecurityPivotal Software Spring SecurityOracle Hospitality Cruise Shipboard Property Management System 20.1.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Communications Unified Inventory Management 7.4.1Oracle Insurance Policy Administration 11.3.0Oracle Insurance Policy Administration 11.2.0Oracle Communications Element ManagerOracle Mysql Enterprise Monitor
670
VMScore
CVE-2018-1260
Spring Security OAuth, versions 2.3 before 2.3.3, 2.2 before 2.2.2, 2.1 before 2.1.2, 2.0 before 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to the authorization endpoint tha...
Pivotal Software Spring Security Oauth
670
VMScore
CVE-2018-1273
Spring Data Commons, versions before 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted r...
Pivotal Software Spring Data CommonsPivotal Software Spring Data RestApache Ignite 1.0.0Apache Ignite
668
VMScore
CVE-2019-3773
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Pivotal Software Spring Web ServicesOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Financial Services Analytical Applications Infrastructure
668
VMScore
CVE-2019-3774
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Pivotal Software Spring BatchPivotal Software Spring Batch 4.1.0
668
VMScore
CVE-2016-9880
The GemFire broker for Cloud Foundry 1.6.x prior to 1.6.5 and 1.7.x prior to 1.7.1 has multiple API endpoints which do not require authentication and could be used to gain access to the cluster managed by the broker.
Pivotal Software Gemfire For Pivotal Cloud FoundryPivotal Software Gemfire For Pivotal Cloud Foundry 1.7.0
668
VMScore
CVE-2017-8045
In Pivotal Spring AMQP versions before 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
Pivotal Software Spring Advanced Message Queuing Protocol 1.7.3Pivotal Software Spring Advanced Message Queuing Protocol 1.7.2Pivotal Software Spring Advanced Message Queuing Protocol 1.6.8Pivotal Software Spring Advanced Message Queuing Protocol 1.6.9Pivotal Software Spring Advanced Message Queuing Protocol 1.6.10Pivotal Software Spring Advanced Message Queuing Protocol 1.5.0Pivotal Software Spring Advanced Message Queuing Protocol 1.7.0Pivotal Software Spring Advanced Message Queuing Protocol 1.6.0Pivotal Software Spring Advanced Message Queuing Protocol 1.6.5Pivotal Software Spring Advanced Message Queuing Protocol 1.6.7Pivotal Software Spring Advanced Message Queuing Protocol 1.5.1Pivotal Software Spring Advanced Message Queuing Protocol 1.6.1Pivotal Software Spring Advanced Message Queuing Protocol 1.6.2Pivotal Software Spring Advanced Message Queuing Protocol 1.6.3Pivotal Software Spring Advanced Message Queuing Protocol 1.5.3Pivotal Software Spring Advanced Message Queuing Protocol 1.5.4Pivotal Software Spring Advanced Message Queuing Protocol 1.5.5Pivotal Software Spring Advanced Message Queuing Protocol 1.5.6Pivotal Software Spring Advanced Message Queuing Protocol 1.7.1Pivotal Software Spring Advanced Message Queuing Protocol 1.6.4Pivotal Software Spring Advanced Message Queuing Protocol 1.6.6Pivotal Software Spring Advanced Message Queuing Protocol 1.5.2
668
VMScore
CVE-2015-5171
The password change functionality in Cloud Foundry Runtime cf-release prior to 216, UAA prior to 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.7.0 allow malicious users to have unspecified impact by leveraging failure to expire existing sessions.
Cloudfoundry Cf-releasePivotal Software Cloud Foundry Elastic RuntimePivotal Software Cloud Foundry Uaa
668
VMScore
CVE-2015-5172
Cloud Foundry Runtime cf-release prior to 216, UAA prior to 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.7.0 allow malicious users to have unspecified impact by leveraging failure to expire password reset links.
Cloudfoundry Cf-releasePivotal Software Cloud Foundry Elastic RuntimePivotal Software Cloud Foundry Uaa
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook