Skip to content
OpenAdvisories

Package · Maven

org.cloudfoundry.identity:cloudfoundry-identity-server

21 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-22723

    UAA User Token Revocation logic error

    Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.

    Cloud Foundry UAA org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 6.1
    CVE-2018-11041

    Cloud Foundry UAA open redirect

    Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects…

    Cloud Foundry Cloud Foundry UAA org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 6.1
    CVE-2018-1190

    Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint

    An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possibl…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 5.3
    CVE-2017-8031

    Cloud Foundry UAA Denial of Service through client token revocation endpoint

    An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior to 52.1). In some cases, the UAA allows an authenticated user for a particular c…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 6.6
    CVE-2017-8032

    Cloud Foundry UAA Identity Zone Admin Privilege Escalation

    In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-relea…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 6.5
    CVE-2017-4974

    Blind SQL Injection with privileged Cloud Foundry UAA endpoints

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 5.9
    CVE-2016-5016

    Cloud Foundry vulnerable to Improper Certificate Validation

    Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not …

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven