Vendor
Pivotal
67 known vulnerabilities.
Products
Cloud Foundry 10
Spring Framework 7
Concourse 4
Pivotal Application Service 4
Pivotal Ops Manager 4
RabbitMQ 3
Reactor Netty 3
Apps Manager 3
Spring Security OAuth 3
Spring Security 3
Pivotal Application Service (PAS) 2
RabbitMQ for PCF 2
RabbitMQ for Pivotal Platform 2
Pivotal Operations Manager 2
Application Service 2
Spring Integration Zip 2
Greenplum Command Center 1
Spring Cloud SSO Connector 1
Gemfire for PCF 1
Spring Data Commons 1
Pivotal Container Service 1
On Demand Services SDK 1
Pivotal tc Server 4.x 1
Pivotal tc Server 3.x 1
Pivotal tc Server 4.x Runtimes 1
Pivotal tc Server 3.x Runtimes 1
Pivotal Container Service (PKS) 1
UAA Release (LTS) 1
Operations Manager 1
Spring AMQP 1
Spring MVC 1
Cloud Cache 1
Pivotal Spring Data REST and Spring Boot 1
VMware Tanzu Application Service for VMs 1
Pivotal Cloud Foundry Elastic Runtime 1
2 results · Clear filters · Feed
-
Critical 9.8
Spring Security OAuth vulnerable to remote code execution (RCE)
Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to t…
-
Critical 9.8
Remote code execution in PATCH requests in Spring Data REST
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.