AS
Product
Application Service
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch
Add Application Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3793 | 9.8 | Apr 24 | Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation service that accepts… Affected: 665.0.0 before 665.0.28; 666.0.0 before 666.0.21; 667.0.0 before 667.0.7 |
| CVE-2019-3777 | 9.8 | Mar 7 | Apps Manager unverified SSL certs in Cloud Controller proxy Affected: 2.2.0 before 2.2.12; 2.3.0 before 2.3.7; 2.4.0 before 2.4.3 |
| CVE-2019-11270 | 7.5 | Aug 5 | Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed… Affected: 2.3.0 before 2.3.15; 2.4.0 before 2.4.11; 2.5.0 before 2.5.7; 2.6.0 before 2.6.2 |
| CVE-2019-11276 | 5.4 | Aug 19 | Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5.x prior to 2.5.8, and 2.6.x prior to 2.6.3, makes a… Affected: 2.3.0 before 2.3.16; 2.4.0 before 2.4.12; 2.5.0 before 2.5.8; 2.6.0 before 2.6.3 |
Showing 4
