cloud foundry Uaa Release Vulnerabilities
Cloud%20foundry Uaa Release vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
UAA logs all query parameters with debug logging level
CVE-2019-11293Cloud FoundryUaa Release8.8HIGHCloud Foundry UAA logs query parameters in tomcat access file
CVE-2019-11290Cloud FoundryUaa Release8.8HIGHUAA is vulnerable to a Blind SCIM injection leading to information disclosure
CVE-2019-11282Cloud FoundryUaa Release4.3MEDIUMPrivilege Escalation via Scope Manipulation in UAA
CVE-2019-11279Cloud FoundryUaa Release (oss)8.7HIGHPrivilege Escalation via Blind SCIM Injection in UAA
CVE-2019-11278Cloud FoundryUaa Release (oss)8.7HIGHUAA SCIM Filter XSS
CVE-2019-11274Cloud FoundryUaa Release (oss)4.3MEDIUMUAA clients.write vulnerability
CVE-2019-11270Cloud FoundryUaa Release (oss)7.3HIGHUAA - Login app subject to clickjacking attack
CVE-2019-3794Cloud FoundryUaa Release (oss)6.5MEDIUMUAA SQL Identity Zone Vulnerability
CVE-2019-11268Cloud FoundryUaa Release (oss)6.5MEDIUMUAA defaults email address to an insecure domain
CVE-2019-3787Cloud FoundryUaa Release (oss)8.3HIGHUAA redirect-uri allows wildcard in the subdomain
CVE-2019-3788Cloud FoundryUaa Release (oss)8.7HIGHJava Projects using HTTP to fetch dependencies
CVE-2019-3801Cloud FoundryCredhub8.7HIGHUAA allows users to modify their own email address
CVE-2019-3775Cloud FoundryUaa Release (oss)7.1HIGHUAA can issue tokens across identity providers if users with matching usernames exist
CVE-2018-15754Cloud FoundryUaa Release4.2MEDIUMUAA Privilege Escalation
CVE-2018-15761Cloud FoundryUaa9.9CRITICALCloud Foundry UAA MFA does not prevent brute force of MFA code
CVE-2018-11082Cloud FoundryUaa Release6.6MEDIUM