CF
Product
Cloud Foundry Uaa
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 18Medium 9Low 1
Watch
Add Cloud Foundry Uaa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5172 | 9.8 | Oct 24 | Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by… Affected: before 2.5.2 |
| CVE-2015-5171 | 9.8 | Oct 24 | The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to… Affected: before 2.5.2 |
| CVE-2017-4992 | 9.8 | Jun 13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions… Affected: through 4.2.0; 2.2.5.4; 2.7.1; 2.7.2; 2.7.3; 2.7.4; +34 more |
| CVE-2016-6637 | 9.6 | Sep 30 | Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH… Affected: 2.3.0; 2.3.1; 2.4.0; 2.5.1; 2.6.1; 2.7.0.2; +15 more |
Showing 4
