CF
Product
Cloud Foundry Uaa
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 18Medium 9Low 1
Watch
Add Cloud Foundry Uaa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8032 | 6.6 | Jul 10 | In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior… Affected: 2.2.5.4; 2.7.1; 2.7.2; 2.7.3; 2.7.4; 2.7.4.1; +34 more |
| CVE-2017-4974 | 6.5 | Jun 13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions… Affected: through 4.2.0; 2.2.5.4; 2.7.1; 2.7.2; 2.7.3; 2.7.4; +33 more |
| CVE-2018-11041 | 6.1 | Jun 25 | Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not… Affected: after 4.6.0 before 4.7.5; after 4.7.5 before 4.10.1; after 4.10.1 before 4.19.0 |
| CVE-2016-0781 | 6.1 | May 25 | The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic… Affected: through 2.7.4.1; 3.0.0; 3.0.1; 3.1.0; 3.2.0 |
| CVE-2015-3190 | 6.1 | May 25 | With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is… Affected: through 2.2.6 |
| CVE-2016-5016 | 5.9 | Apr 24 | Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic… Affected: through 3.4.1 |
| CVE-2019-3794 | 5.4 | Jul 18 | Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints Affected: before 73.4.0 |
| CVE-2016-6636 | 5.3 | Sep 30 | The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x… Affected: 2.3.0; 2.3.1; 2.4.0; 2.5.1; 2.6.1; 2.7.0.2; +15 more |
| CVE-2019-11282 | 4.3 | Oct 23 | Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack Affected: before 74.3.0 |
Showing 9