Login Request a demo
PS
Vendor
Pivotal Software
47 products with CVEs on record
188
CVEs
1
On KEV
0
New 30D
Products
SD
Spring Data Rest
Pivotal Software
9.8
4 CVEs1 on KEV0 new
CF
Cloud Foundry Uaa
Pivotal Software
9.8
32 CVEs0 on KEV0 new
CF
Cloud Foundry Elastic Runtime
Pivotal Software
9.8
28 CVEs0 on KEV0 new
RA
Rabbitmq
Pivotal Software
9.8
11 CVEs0 on KEV0 new
CF
Cloud Foundry
Pivotal Software
9.8
10 CVEs0 on KEV0 new
OM
Operations Manager
Pivotal Software
9.8
10 CVEs0 on KEV0 new
SF
Spring Framework
Pivotal Software
8.8
10 CVEs0 on KEV0 new
CF
Cloud Foundry Uaa-release
Pivotal Software
8.8
8 CVEs0 on KEV0 new
CO
Concourse
Pivotal Software
10.0
7 CVEs0 on KEV0 new
PA
Pivotal Application Service
Pivotal Software
8.8
7 CVEs0 on KEV0 new
CF
Cloud Foundry Ops Manager
Pivotal Software
9.6
5 CVEs0 on KEV0 new
AS
Application Service
Pivotal Software
9.8
4 CVEs0 on KEV0 new
SS
Spring Security
Pivotal Software
8.8
4 CVEs0 on KEV0 new
SS
Spring Security Oauth
Pivotal Software
9.8
4 CVEs0 on KEV0 new
CF
Cloud Foundry CF
Pivotal Software
8.8
3 CVEs0 on KEV0 new
CF
Cloud Foundry Cf-deployment
Pivotal Software
8.8
2 CVEs0 on KEV0 new
CF
Cloud Foundry Cf-release
Pivotal Software
8.8
2 CVEs0 on KEV0 new
CU
Cloudfoundry Uaa Release
Pivotal Software
9.8
2 CVEs0 on KEV0 new
GF
Gemfire For Pivotal Cloud Foundry
Pivotal Software
9.8
2 CVEs0 on KEV0 new
LO
Login-server
Pivotal Software
8.1
2 CVEs0 on KEV0 new
PC
Pivotal Container Service
Pivotal Software
8.8
2 CVEs0 on KEV0 new
SA
Spring Advanced Message Queuing Protocol
Pivotal Software
9.8
2 CVEs0 on KEV0 new
SB
Spring Batch Admin
Pivotal Software
8.8
2 CVEs0 on KEV0 new
WS
Windows Stemcells
Pivotal Software
8.5
2 CVEs0 on KEV0 new
BS
Bits Service
Pivotal Software
8.1
1 CVEs0 on KEV0 new
BC
Bosh Cli
Pivotal Software
8.8
1 CVEs0 on KEV0 new
BA
Broker Api
Pivotal Software
9.8
1 CVEs0 on KEV0 new
CF
Cf-deployment
Pivotal Software
7.5
1 CVEs0 on KEV0 new
CF
Cloud Foundry CF Mysql
Pivotal Software
7.5
1 CVEs0 on KEV0 new
CF
Cloud Foundry Diego
Pivotal Software
7.2
1 CVEs0 on KEV0 new
CF
Cloud Foundry Log Cache
Pivotal Software
9.8
1 CVEs0 on KEV0 new
CF
Cloud Foundry Nfs Volume
Pivotal Software
8.8
1 CVEs0 on KEV0 new
CF
Cloud Foundry Smb Volume
Pivotal Software
8.8
1 CVEs0 on KEV0 new
CU
Cloudfoundry Uaa
Pivotal Software
9.8
1 CVEs0 on KEV0 new
CR
Credhub-release
Pivotal Software
8.8
1 CVEs0 on KEV0 new
CS
Credhub Service Broker
Pivotal Software
8.1
1 CVEs0 on KEV0 new
GE
Gemfire
Pivotal Software
7.5
1 CVEs0 on KEV0 new
GR
Greenplum
Pivotal Software
7.2
1 CVEs0 on KEV0 new
GC
Greenplum Command Center
Pivotal Software
7.5
1 CVEs0 on KEV0 new
GR
Grootfs
Pivotal Software
7.8
1 CVEs0 on KEV0 new
OD
ON Demand Services Sdk
Pivotal Software
9.8
1 CVEs0 on KEV0 new
PC
Pivotal Cloud Cache
Pivotal Software
8.8
1 CVEs0 on KEV0 new
RM
Rabbitmq Management
Pivotal Software
–
1 CVEs0 on KEV0 new
SD
Spring Data Java Persistance Api
Pivotal Software
5.3
1 CVEs0 on KEV0 new
SD
Spring Data Java Persistence Api
Pivotal Software
5.3
1 CVEs0 on KEV0 new
SD
Spring Data Jpa
Pivotal Software
5.6
1 CVEs0 on KEV0 new
SP
Spring-ldap
Pivotal Software
8.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-31683
CO
Concourse
Pivotal Software
5.4
0%
Dec 19Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue
CVE-2021-22112
SS
Spring Security
Pivotal Software
8.8
3%
Feb 23Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is…
CVE-2020-5419
RA
Rabbitmq
Pivotal Software
6.7
0%
Aug 31RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution
CVE-2020-5415
CO
Concourse
Pivotal Software
10.0
1%
Aug 12Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with…
CVE-2020-5408
SS
Spring Security
Pivotal Software
6.5
2%
May 14Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector…
CVE-2020-5409
CO
Concourse
Pivotal Software
6.1
1%
May 14Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow
CVE-2020-5407
SS
Spring Security
Pivotal Software
8.8
1%
May 13Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during SAML response validation
CVE-2020-5399
CF
Cloud Foundry Cf-deployment
Pivotal Software
7.4
1%
Feb 12Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS
CVE-2013-6430
SF
Spring Framework
Pivotal Software
5.4
2%
Jan 10The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which…
CVE-2019-11292
OM
Operations Manager
Pivotal Software
6.5
1%
Jan 9Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file
CVE-2019-11287
RA
Rabbitmq
Pivotal Software
7.5
4%
Nov 23Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4,…
CVE-2019-11283
CF
Cloud Foundry Smb Volume
Pivotal Software
8.8
1%
Oct 23Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs
CVE-2019-11282
CF
Cloud Foundry Uaa
Pivotal Software
4.3
1%
Oct 23Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack
CVE-2019-11281
RA
Rabbitmq
Pivotal Software
4.8
1%
Oct 16Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain…
CVE-2019-11275
PA
Pivotal Application Service
Pivotal Software
4.3
1%
Oct 1Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and…
CVE-2019-11280
PA
Pivotal Application Service
Pivotal Software
8.8
1%
Sep 20Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an…
CVE-2019-11276
AS
Application Service
Pivotal Software
5.4
0%
Aug 19Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5.x prior to 2.5.8, and 2.6.x prior to 2.6.3, makes a…
CVE-2019-11270
AS
Application Service
Pivotal Software
7.5
1%
Aug 5Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed…
CVE-2019-11273
PC
Pivotal Container Service
Pivotal Software
4.3
1%
Jul 23Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the…
CVE-2019-3794
CF
Cloud Foundry Uaa
Pivotal Software
5.4
1%
Jul 18Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints
CVE-2019-11268
CF
Cloud Foundry Uaa-release
Pivotal Software
4.3
1%
Jul 11Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping
CVE-2019-3787
CF
Cloud Foundry Uaa-release
Pivotal Software
8.8
1%
Jun 19Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @…
CVE-2019-11269
SS
Spring Security Oauth
Pivotal Software
5.4
9%
Jun 12Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to…
CVE-2019-3790
OM
Operations Manager
Pivotal Software
5.4
1%
Jun 6The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration…
CVE-2019-3802
SD
Spring Data Java Persistance Api
Pivotal Software
5.3
1%
Jun 3This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20
CVE-2019-3797
SD
Spring Data Java Persistence Api
Pivotal Software
5.3
1%
May 6This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19
CVE-2019-3793
AS
Application Service
Pivotal Software
9.8
1%
Apr 24Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation service that accepts…
CVE-2019-3792
CO
Concourse
Pivotal Software
7.5
1%
Apr 1Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection
CVE-2019-3778
SS
Spring Security Oauth
Pivotal Software
6.5
17%
Mar 7Open Redirect in spring-security-oauth2
CVE-2019-3777
AS
Application Service
Pivotal Software
9.8
2%
Mar 7Apps Manager unverified SSL certs in Cloud Controller proxy
CVE-2019-3776
OM
Operations Manager
Pivotal Software
5.4
1%
Mar 7Reflected XSS in Pivotal Operations Manager
CVE-2019-3803
CO
Concourse
Pivotal Software
7.5
1%
Jan 12Concourse includes token in CLI authentication callback
CVE-2018-15798
CO
Concourse
Pivotal Software
5.4
1%
Dec 19Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites
CVE-2018-15754
CF
Cloud Foundry Uaa-release
Pivotal Software
8.8
2%
Dec 13Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error
CVE-2018-1279
RA
Rabbitmq
Pivotal Software
6.5
2%
Dec 10Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster
CVE-2018-15797
CF
Cloud Foundry Nfs Volume
Pivotal Software
8.8
2%
Dec 5Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH…
CVE-2018-15761
CF
Cloud Foundry Uaa
Pivotal Software
8.8
2%
Nov 19Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation
CVE-2018-15759
BA
Broker Api
Pivotal Software
9.8
2%
Nov 19Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials
CVE-2018-15795
CS
Credhub Service Broker
Pivotal Software
8.1
1%
Nov 13Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client
CVE-2018-15796
BS
Bits Service
Pivotal Software
8.1
1%
Nov 9Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs
CVE-2018-15762
OM
Operations Manager
Pivotal Software
8.8
1%
Nov 2Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a…
CVE-2018-15758
SS
Spring Security Oauth
Pivotal Software
8.1
2%
Oct 18Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsupported versions could be susceptible to…
CVE-2018-15763
PC
Pivotal Container Service
Pivotal Software
8.8
1%
Oct 5Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs
CVE-2018-1264
CF
Cloud Foundry Log Cache
Pivotal Software
9.8
2%
Oct 5Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report
CVE-2018-11082
CU
Cloudfoundry Uaa
Pivotal Software
9.8
1%
Oct 5Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes
CVE-2018-11081
OM
Operations Manager
Pivotal Software
8.8
1%
Oct 5Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1.11.x prior to 2, fails to write the Operations Manager UAA config…
CVE-2018-1198
PC
Pivotal Cloud Cache
Pivotal Software
8.8
1%
Sep 17Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs
CVE-2018-11088
PA
Pivotal Application Service
Pivotal Software
8.8
1%
Sep 17Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation…
CVE-2018-11086
PA
Pivotal Application Service
Pivotal Software
8.8
1%
Sep 17Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of…
CVE-2018-11087
SA
Spring Advanced Message Queuing Protocol
Pivotal Software
5.9
1%
Sep 14Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation
CVE-2016-0715
CF
Cloud Foundry Elastic Runtime
Pivotal Software
5.9
1%
Sep 11Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure
CVE-2018-11047
CF
Cloud Foundry Uaa
Pivotal Software
7.5
1%
Jul 24Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests…
CVE-2018-11044
PA
Pivotal Application Service
Pivotal Software
6.5
1%
Jul 24Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2.1.x prior to 2.1.8 and 2.0.x prior to 2.0.17 and 1.12.x prior to 1.12.26, does…
CVE-2018-11045
OM
Operations Manager
Pivotal Software
5.9
1%
Jul 11Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file…
CVE-2018-11046
OM
Operations Manager
Pivotal Software
6.5
1%
Jun 25Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patches
CVE-2018-11041
CF
Cloud Foundry Uaa
Pivotal Software
6.1
1%
Jun 25Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not…
CVE-2018-1265
CF
Cloud Foundry Diego
Pivotal Software
7.2
2%
Jun 6Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers
CVE-2018-1276
WS
Windows Stemcells
Pivotal Software
6.5
1%
May 17Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere
CVE-2018-1262
CF
Cloud Foundry Uaa
Pivotal Software
7.2
1%
May 15Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline…
CVE-2018-1280
GC
Greenplum Command Center
Pivotal Software
7.5
2%
May 11Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability