UA
Product
User Account And Authentication
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add User Account And Authentication to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11293 | 6.5 | Dec 6 | Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter Affected: before 74.10.0 |
| CVE-2021-22098 | 6.1 | Aug 11 | UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability Affected: before 75.5.0 |
| CVE-2019-11274 | 6.1 | Aug 9 | Cloud Foundry UAA, versions prior to 74.0.0, is vulnerable to an XSS attack Affected: before 74.0.0 |
| CVE-2023-20903 | 4.3 | Mar 28 | This disclosure regards a vulnerability related to UAA refresh tokens and external identity providers.Assuming that an external identity provider is linked to the UAA, a refresh… Affected: All versions, or not specified |
Showing 4