Vendor
Pivotal
67 known vulnerabilities.
Products
Cloud Foundry 10
Spring Framework 7
Concourse 4
Pivotal Application Service 4
Pivotal Ops Manager 4
RabbitMQ 3
Reactor Netty 3
Apps Manager 3
Spring Security OAuth 3
Spring Security 3
Pivotal Application Service (PAS) 2
RabbitMQ for PCF 2
RabbitMQ for Pivotal Platform 2
Pivotal Operations Manager 2
Application Service 2
Spring Integration Zip 2
Greenplum Command Center 1
Spring Cloud SSO Connector 1
Gemfire for PCF 1
Spring Data Commons 1
Pivotal Container Service 1
On Demand Services SDK 1
Pivotal tc Server 4.x 1
Pivotal tc Server 3.x 1
Pivotal tc Server 4.x Runtimes 1
Pivotal tc Server 3.x Runtimes 1
Pivotal Container Service (PKS) 1
UAA Release (LTS) 1
Operations Manager 1
Spring AMQP 1
Spring MVC 1
Cloud Cache 1
Pivotal Spring Data REST and Spring Boot 1
VMware Tanzu Application Service for VMs 1
Pivotal Cloud Foundry Elastic Runtime 1
2 results · Clear filters · Feed
-
High 7.5CVE-2018-1259 Public exploit
Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references
Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying li…
-
High 8.8
Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the…