Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
pivotal application service vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2018-1200
Apps Manager for PCF (Pivotal Application Service 1.11.x prior to 1.11.26, 1.12.x prior to 1.12.14, and 2.0.x prior to 2.0.5) allows unprivileged remote file read in its container via specially-crafted links.
Pivotal Software Pivotal Application Service
383
VMScore
CVE-2018-1278
Apps Manager included in Pivotal Application Service, versions 1.12.x before 1.12.22, 2.0.x before 2.0.13, and 2.1.x before 2.1.4 contains an authorization enforcement vulnerability. A member of any org is able to create invitations to any org for which the org GUID can be discov...
Pivotal Software Pivotal Application Service
356
VMScore
CVE-2018-11088
Pivotal Applications Manager in Pivotal Application Service, versions 2.0 before 2.0.21 and 2.1 before 2.1.13 and 2.2 before 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which con...
Pivotal Software Pivotal Application Service
356
VMScore
CVE-2018-11044
Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x before 2.2.1 and 2.1.x before 2.1.8 and 2.0.x before 2.0.17 and 1.12.x before 1.12.26, does not escape all user-provided content when sending invitation emails. A malicious authenticated user can inject ...
Pivotal Software Pivotal Application Service
356
VMScore
CVE-2018-11086
Pivotal Usage Service in Pivotal Application Service, versions 2.0 before 2.0.21 and 2.1 before 2.1.13 and 2.2 before 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains t...
Pivotal Software Pivotal Application Service
578
VMScore
CVE-2019-11280
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x before 2.3.18, 2.4.x before 2.4.14, 2.5.x before 2.5.10, and 2.6.x before 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated us...
Pivotal Software Pivotal Application Service
356
VMScore
CVE-2019-11275
Pivotal Application Manager, versions 666.0.x before 666.0.36, versions 667.0.x before 667.0.22, versions 668.0.x before 668.0.21, versions 669.0.x before 669.0.13, and versions 670.0.x before 670.0.7, contain a vulnerability where a remote authenticated user can create an app wi...
Pivotal Apps Manager
Pivotal Software Pivotal Application Service
445
VMScore
CVE-2019-3793
Pivotal Apps Manager Release, versions 665.0.x before 665.0.28, versions 666.0.x before 666.0.21, versions 667.0.x before 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network traffic and gain access to the authorization c...
Pivotal Software Application Service
445
VMScore
CVE-2019-3777
Pivotal Application Service (PAS), versions 2.2.x before 2.2.12, 2.3.x before 2.3.7 and 2.4.x before 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS ...
Pivotal Software Application Service
427
VMScore
CVE-2019-11276
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x before 2.3.16, 2.4.x before 2.4.12, 2.5.x before 2.5.8, and 2.6.x before 2.6.3, makes a request to the /cloudapplication endpoint via Spring actuator, and subsequent requests via unsecured http. An adjac...
Pivotal Software Application Service
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
firewall
CVE-2024-35649
stored XSS
CVE-2022-28654
CVE-2020-35153
CVE-2024-27348
CVE-2022-28652
local users
CVE-2017-3506
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »