Skip to content
OpenAdvisories

Product · Cloud Foundry

UAA Release (OSS)

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2019-11274

    UAA SCIM Filter XSS

    Cloud Foundry UAA, versions prior to 74.0.0, is vulnerable to an XSS attack. A remote unauthenticated malicious attacker could craft a URL that contains a SCIM filter that contains malicious JavaScript, which older browsers may execute.

    Cloud Foundry UAA Release (OSS)
  • Medium 6.5
    CVE-2019-3794

    UAA - Login app subject to clickjacking attack

    Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints. A remote user can perform clickjacking attacks on UAA's frontend sites.

    Cloud Foundry UAA Release (OSS)
  • Medium 6.5
    CVE-2019-11268

    UAA SQL Identity Zone Vulnerability

    Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated malicious user with basic read privileges for one identity zone can extend those reading privileges to all other identity zones and obtain private i…

    Cloud Foundry UAA Release (OSS)