OM
Product
Operations Manager
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 5Low 0
Watch
Add Operations Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0897 | 9.8 | Sep 18 | Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has… Affected: through 1.6.16; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +3 more |
| CVE-2016-0883 | 9.8 | Sep 18 | Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote… Affected: through 1.5.13; 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; +4 more |
| CVE-2018-15762 | 8.8 | Nov 2 | Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a… Affected: 2.0.0 before 2.0.24; 2.1.0 before 2.1.15; 2.2.0 before 2.2.7; 2.3.0 before 2.3.1 |
| CVE-2018-11081 | 8.8 | Oct 5 | Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1.11.x prior to 2, fails to write the Operations Manager UAA config… Affected: 1.11.0 before 1.12.25; 2.0.0 before 2.0.16; 2.1.0 before 2.1.11; 2.2.0 before 2.2.1 |
| CVE-2019-11270 | 7.5 | Aug 5 | Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed… Affected: 2.3.0 before 2.3.22; 2.4.0 before 2.4.16; 2.5.0 before 2.5.10; 2.6.0 before 2.6.4 |
| CVE-2019-11292 | 6.5 | Jan 9 | Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file Affected: 2.4.0 before 2.4.27; 2.5.0 before 2.5.24; 2.6.0 before 2.6.16; 2.7.0 before 2.7.5 |
| CVE-2018-11046 | 6.5 | Jun 25 | Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches Affected: 2.1.0 before 2.1.6; 2.0.14 |
| CVE-2018-11045 | 5.9 | Jul 11 | Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file… Affected: 1.12 before 1.12.22; after 2.0 before 2.0.15; 2.1.0 before 2.1.6 |
| CVE-2019-3790 | 5.4 | Jun 6 | The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration… Affected: 2.2.0 before 2.2.23; 2.3.0 before 2.3.16; 2.4.0 before 2.4.11; 2.5.0 before 2.5.3 |
| CVE-2019-3776 | 5.4 | Mar 7 | Reflected XSS in Pivotal Operations Manager Affected: 2.1.0 before 2.1.20; 2.2.0 before 2.2.16; 2.3.0 before 2.3.10; 2.4.0 before 2.4.3 |
Showing 10