Login Request a demo
UR
Product
Uaa Release
by Cloudfoundry · last CVE Mar 5, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 3Medium 4Low 0
Severity
All severities8Critical1High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Uaa Release to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-3801
9.8
1%
Apr 25
Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building
Affected: before 64.0
CVE-2019-11279
8.8
1%
Sep 26
CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes
Affected: before 74.1.0
CVE-2016-0732
8.8
1%
Sep 7
The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and…
Affected: 2; 3; 4
CVE-2025-22246
7.5
0%
May 13
Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs
Affected: 77.21.0 before 77.32.0
CVE-2026-22723
6.5
0%
Mar 5
UAA User Token Revocation logic error
Affected: 77.30.0 before 78.8.0
CVE-2019-3775
6.5
1%
Mar 7
UAA allows users to modify their own email address
Affected: before 70.0
CVE-2019-3788
6.1
1%
Apr 25
Cloud Foundry UAA Release, versions prior to 71.0, allows clients to be configured with an insecure redirect uri
Affected: before 71.0
CVE-2017-8031
5.3
1%
Nov 27
An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior…
Affected: 30 before 30.6; 45 before 45.4; 52
Showing 8