CO
Product
Concourse
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add Concourse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3792 | 7.5 | Apr 1 | Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection Affected: before 5.0.1 |
| CVE-2019-3803 | 7.5 | Jan 12 | Concourse includes token in CLI authentication callback Affected: before 4.2.2 |
| CVE-2018-1227 | 7.5 | Mar 13 | Pivotal Concourse after 2018-03-05 might allow remote attackers to have an unspecified impact, if a customer obtained the Concourse software from a DNS domain that is no longer… Affected: 3.9.2 and later |
Showing 3