Known vulnerabilities in Cloud Foundry UAA - page 2

Software CPE: cpe:2.3:a:cloud_foundry_foundation:cloud_foundry_uaa:*:*:*:*:*:*:*:*
Total vulnerabilities: 37
Public exploits: 6
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cloud Foundry UAA Cloud Foundry UAA is affected by 37 known vulnerabilities: 1 critical, 12 high, 15 medium, 9 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25575 - Cross-Site Request Forgery (CSRF)
CVE-2020-5402
CWE-352 Low
No
No
74.14.0 25.02.2020 SB2020022507
#VU25002 - Session Fixation
CVE-2019-17563
CWE-384 Low
No
No
74.16.0 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU23391 - Information Exposure Through Log Files
CVE-2019-11290
CWE-532 Medium
No
No
74.8.0 04.12.2019 SB2019112620
#VU23390 - Credentials Management
CVE-2019-11293
CWE-255 Medium
No
No
74.10.0 04.12.2019 SB2019120414
#VU21088 - Permissions, Privileges, and Access Controls
CVE-2019-11278
CWE-264 High
No
No
74.1.0 12.09.2019 SB2019091221
#VU35705 - Improper input validation
CVE-2019-3794
CWE-20 Low
No
No
73.4.0 18.07.2019 SB2019071822
#VU19130 - Improper Authentication
CVE-2016-6659
CWE-287 High
No
No
2.7.4.12, 3.9.3 10.07.2019 SB2016120703
#VU16595 - Improper Authorization
CVE-2018-15754
CWE-285 Low
No
No
66.0 10.12.2018 SB2018121818
#VU36394 - Improper input validation
CVE-2018-15761
CWE-20 High
No
No
4.23.0 19.11.2018 SB2018111924
#VU37015 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-11041
CWE-601 Low
No
No
4.19.0 25.06.2018 SB2018062516
#VU31357 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1192
CWE-200 High
No
No
4.8.3 01.02.2018 SB2018020132
#VU31402 - Cross-Site Request Forgery (CSRF)
CVE-2015-5170
CWE-352 Medium
No
No
2.5.2 24.10.2017 SB2017102415
#VU31403 - Insufficient Session Expiration
CVE-2015-5171
CWE-613 High
No
No
2.5.2 24.10.2017 SB2017102415
#VU31404 - Weak password recovery mechanism
CVE-2015-5172
CWE-640 High
No
No
2.5.2 24.10.2017 SB2017102415
#VU31405 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5173
CWE-200 High
No
No
2.5.2 24.10.2017 SB2017102415
#VU712 - Cross-Site Request Forgery (CSRF)
CVE-2016-6637
CWE-352 Low
No
No
- 30.09.2016 SB2016093007
#VU713 - Improper input validation
CVE-2016-6636
CWE-20 Low
No
No
- 30.09.2016 SB2016093008


Showing elements 21 - 40 out of 37