Pivotal

Records86All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

Pivotal records in CISA KEV

No Pivotal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vmware Harbor Registry 4 records MEDIUM Cloud Foundry Deployment 2 records MEDIUM Cloud Foundry Elastic Runtime 2 records LOW Cloud Foundry Notifications 2 records LOW Cloud Foundry Routing Release 2 records MEDIUM Spring Security Oauth 2 records HIGH Application Service 1 record LOW Apps Manager 1 record LOW

Records

4 records in Vmware Harbor Registry · all components

TI-2019-13713 CVE-2019-19023 · GHSA-q6cj-6jvq-jwmh

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege…

MEDIUM 41

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01618 Published 2020-03-20 Fixed in 1.8.6, 1.9.3 CWE-269

TI-2019-13714 CVE-2019-19025 · GHSA-rffr-c932-cpxv

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the…

MEDIUM 40

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0102 Published 2020-03-20 Fixed in 1.8.6, 1.9.3 CWE-352

TI-2019-13716 CVE-2019-19029 · GHSA-jr34-mff8-pc6f

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection…

LOW 36

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02104 Published 2020-03-20 Fixed in 1.8.6, 1.9.3 CWE-89

TI-2019-13715 CVE-2019-19026 · GHSA-w4x5-jqq4-qc8x

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection…

LOW 25

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01424 Published 2020-03-20 Fixed in 1.8.6, 1.9.3 CWE-89

Open these records in search →