Skip to content
OpenAdvisories

Product · Cloud Foundry

CF Deployment

20 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-59358 Public exploit

    UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type

    Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token to obtain a fully-privileged client_credentials token for the OAuth client that issued it, by presenti…