Read the docs

Pivotal

Records86All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9

Exploited now

Pivotal records in CISA KEV

No Pivotal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vmware Harbor Registry 4 records MEDIUM Cloud Foundry Deployment 2 records MEDIUM Cloud Foundry Elastic Runtime 2 records LOW Cloud Foundry Notifications 2 records LOW Cloud Foundry Routing Release 2 records MEDIUM Spring Security Oauth 2 records HIGH Application Service 1 record LOW Apps Manager 1 record LOW

Records

2 records in Spring Security Oauth · all components

TI-2016-04299 CVE-2016-4977 · GHSA-7q9c-h23x-65fq

When processing authorization requests using the whitelabel views in Spring Security…

Priority HIGH 78

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user t…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.79176 Published 2017-05-25 Fixed in 2.0.10, 1.0.5 CWE-19
TI-2022-07146 CVE-2022-22969 · GHSA-c2cp-3xj9-97w9

Uncontrolled resource consumption in Spring Security OAuth

Priority LOW 31

<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 C…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01253 Published 2022-04-21 Fixed in 2.5.2.RELEASE, 2.4.2.RELEASE CWE-400
Open these records in search →