What’s Vulnerable › Products

Cloudfoundry User Account And Authentication vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Cloudfoundry User Account And Authentication version is affected

Latest Cloudfoundry User Account And Authentication vulnerabilities

• CVE-2023-20903 — (CVSS 4.3)
• CVE-2021-22098 — (CVSS 6.1)
• CVE-2021-22001 — (CVSS 7.5)
• CVE-2020-5402 — UAA fails to check the state parameter when authenticating with external IDPs (CVSS 8.8)
• CVE-2019-11293 — UAA logs all query parameters with debug logging level (CVSS 6.5)
• CVE-2019-11290 — Cloud Foundry UAA logs query parameters in tomcat access file (CVSS 7.5)
• CVE-2019-11278 — Privilege Escalation via Blind SCIM Injection in UAA (CVSS 8.8)
• CVE-2019-11274 — UAA SCIM Filter XSS (CVSS 6.1)
• CVE-2016-0732 — (CVSS 8.8)