Skip to content
OpenAdvisories

Vendor

Pivotal

67 known vulnerabilities.

Products

Cloud Foundry 10 Spring Framework 7 Concourse 4 Pivotal Application Service 4 Pivotal Ops Manager 4 RabbitMQ 3 Reactor Netty 3 Apps Manager 3 Spring Security OAuth 3 Spring Security 3 Pivotal Application Service (PAS) 2 RabbitMQ for PCF 2 RabbitMQ for Pivotal Platform 2 Pivotal Operations Manager 2 Application Service 2 Spring Integration Zip 2 Greenplum Command Center 1 Spring Cloud SSO Connector 1 Gemfire for PCF 1 Spring Data Commons 1 Pivotal Container Service 1 On Demand Services SDK 1 Pivotal tc Server 4.x 1 Pivotal tc Server 3.x 1 Pivotal tc Server 4.x Runtimes 1 Pivotal tc Server 3.x Runtimes 1 Pivotal Container Service (PKS) 1 UAA Release (LTS) 1 Operations Manager 1 Spring AMQP 1 Spring MVC 1 Cloud Cache 1 Pivotal Spring Data REST and Spring Boot 1 VMware Tanzu Application Service for VMs 1 Pivotal Cloud Foundry Elastic Runtime 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.1
    CVE-2019-11291

    RabbitMQ XSS attack via federation and shovel endpoints

    Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input…

    Pivotal RabbitMQ RabbitMQ for Pivotal Platform rabbitmq-server Debian Hex
  • Low 2.4
    CVE-2019-11281

    RabbitMQ XSS attack

    Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, …

    Pivotal RabbitMQ RabbitMQ for PCF rabbitmq-server Debian
  • Low 3.5
    CVE-2019-11275

    CSV Injection in usage report downloaded from Pivotal Application Manager

    Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote authenti…

    Pivotal Apps Manager
  • Low 2.2
    CVE-2019-11273

    PKS Telemetry logs credentials

    Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able …

    Pivotal Pivotal Container Service (PKS)
  • Low 3.7
    CVE-2015-3189

    Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password

    With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new o…

    Pivotal Cloud Foundry org.cloudfoundry.identity:cloudfoundry-identity-server Maven