Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
pivotal apps manager vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2019-11275
Pivotal Application Manager, versions 666.0.x before 666.0.36, versions 667.0.x before 667.0.22, versions 668.0.x before 668.0.21, versions 669.0.x before 669.0.13, and versions 670.0.x before 670.0.7, contain a vulnerability where a remote authenticated user can create an app wi...
Pivotal Apps Manager
Pivotal Software Pivotal Application Service
4.3
CVSSv2
CVE-2018-1200
Apps Manager for PCF (Pivotal Application Service 1.11.x prior to 1.11.26, 1.12.x prior to 1.12.14, and 2.0.x prior to 2.0.5) allows unprivileged remote file read in its container via specially-crafted links.
Pivotal Software Pivotal Application Service
6.5
CVSSv2
CVE-2019-11280
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x before 2.3.18, 2.4.x before 2.4.14, 2.5.x before 2.5.10, and 2.6.x before 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated us...
Pivotal Software Pivotal Application Service
4
CVSSv2
CVE-2018-11044
Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x before 2.2.1 and 2.1.x before 2.1.8 and 2.0.x before 2.0.17 and 1.12.x before 1.12.26, does not escape all user-provided content when sending invitation emails. A malicious authenticated user can inject ...
Pivotal Software Pivotal Application Service
4.3
CVSSv2
CVE-2018-1278
Apps Manager included in Pivotal Application Service, versions 1.12.x before 1.12.22, 2.0.x before 2.0.13, and 2.1.x before 2.1.4 contains an authorization enforcement vulnerability. A member of any org is able to create invitations to any org for which the org GUID can be discov...
Pivotal Software Pivotal Application Service
5
CVSSv2
CVE-2019-3793
Pivotal Apps Manager Release, versions 665.0.x before 665.0.28, versions 666.0.x before 666.0.21, versions 667.0.x before 667.0.7, contain an invitation service that accepts HTTP. A remote unauthenticated user could listen to network traffic and gain access to the authorization c...
Pivotal Software Application Service
5
CVSSv2
CVE-2019-3777
Pivotal Application Service (PAS), versions 2.2.x before 2.2.12, 2.3.x before 2.3.7 and 2.4.x before 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS ...
Pivotal Software Application Service
4.3
CVSSv2
CVE-2016-0926
Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.6.32 and 1.7.x prior to 1.7.8 allows remote malicious users to inject arbitrary web script or HTML via unspecified input that improperly interacts with the AngularJS...
Pivotal Software Cloud Foundry Elastic Runtime
4.8
CVSSv2
CVE-2019-11276
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x before 2.3.16, 2.4.x before 2.4.12, 2.5.x before 2.5.8, and 2.6.x before 2.6.3, makes a request to the /cloudapplication endpoint via Spring actuator, and subsequent requests via unsecured http. An adjac...
Pivotal Software Application Service
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started