Skip to content
OpenAdvisories

Product · Cloud Foundry

Cloud Foundry UAA

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-22216

    CVE-2025-22216 UAA Missing Zone Validation

    A UAA configured with multiple identity zones, does not properly validate session information across those zones. A User authenticated against a corporate IDP can re-use their jsessionid to access other zones.

    Cloud Foundry Cloud Foundry UAA
  • Medium 6.1
    CVE-2018-11041

    Cloud Foundry UAA open redirect

    Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects…

    Cloud Foundry Cloud Foundry UAA org.cloudfoundry.identity:cloudfoundry-identity-server Maven