Security
فارسی
All products

org.cloudfoundry.identity:cloudfoundry-identity-server

Maven · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cloudfoundry UAA has logic error in the token revocation endpoint implementationCVE-2026-22723 · GHSA-6WCW-R64P-QRRW org.cloudfoundry.identity:cloudfoundry-identity-server Maven Medium Fix reported
Cloud Foundry UAA Denial of Service through client token revocation endpointCVE-2017-8031 · GHSA-J4P3-2M2H-CV5F org.cloudfoundry.identity:cloudfoundry-identity-server Maven Medium Fix reported
UAA privilege escalation across identity zonesCVE-2018-1262 · GHSA-8V97-GV3G-32RF org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Cloud Foundry UAA Privilege EscalationCVE-2018-15761 · GHSA-292X-HJR8-226F org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Cloud Foundry denial of service vulnerabilityCVE-2017-4960 · GHSA-HXGW-7539-PV7R org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Cloud Foundry UAA reset password vulnerable to brute force attackCVE-2016-3084 · GHSA-FM5C-2RWC-887W org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Cloud Foundry UAA password reset vulnerabilityCVE-2017-4991 · GHSA-CGRG-X34R-78F3 org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Cloud Foundry UAA open redirectCVE-2018-11041 · GHSA-XH4M-99QP-W483 org.cloudfoundry.identity:cloudfoundry-identity-server Maven Medium Fix reported
Cloud Foundry UAA accepts refresh token as access token on admin endpointsCVE-2018-11047 · GHSA-R4V8-9HGX-VM6M org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpointCVE-2018-1190 · GHSA-J97Q-9XP9-G5FX org.cloudfoundry.identity:cloudfoundry-identity-server Maven Medium Fix reported
Cloud Foundry UAA SessionID present in Audit Event LogsCVE-2018-1192 · GHSA-XG5V-696H-C3VR org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Blind SQL Injection with privileged Cloud Foundry UAA endpointsCVE-2017-4974 · GHSA-CW9C-V3V2-99HM org.cloudfoundry.identity:cloudfoundry-identity-server Maven Medium Fix reported
Cloud Foundry UAA Privilege EscalationCVE-2017-4973 · GHSA-PGJC-GC7G-P2C6 org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported
Cloud Foundry UAA privilege escalation with user invitationsCVE-2017-4992 · GHSA-JCMH-X32V-7MGF org.cloudfoundry.identity:cloudfoundry-identity-server Maven Critical Fix reported
Cloud Foundry UAA Identity Zone Admin Privilege EscalationCVE-2017-8032 · GHSA-9FRW-WMVQ-5RRC org.cloudfoundry.identity:cloudfoundry-identity-server Maven Medium Fix reported
Cloud Foundry vulnerable to Cross-Site Request ForgeryCVE-2016-6637 · GHSA-4M8C-H7FR-GQ5C org.cloudfoundry.identity:cloudfoundry-identity-server Maven Critical Fix reported
Cloud Foundry vulnerable to Improper Certificate ValidationCVE-2016-5016 · GHSA-RC2R-W8JV-VGGP org.cloudfoundry.identity:cloudfoundry-identity-server Maven Medium Fix reported
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten PasswordCVE-2015-5172 · GHSA-CQ6M-74R4-X77G org.cloudfoundry.identity:cloudfoundry-identity-server Maven Critical Fix reported
Cloud Foundry Runtime Insufficient Session Expiration vulnerabilityCVE-2015-5171 · GHSA-H533-Q6JC-QX28 org.cloudfoundry.identity:cloudfoundry-identity-server Maven Critical Fix reported
Cloud Foundry Runtime Cross-Site Request Forgery vulnerabilityCVE-2015-5170 · GHSA-MPV3-G527-FQRJ org.cloudfoundry.identity:cloudfoundry-identity-server Maven High Fix reported