Login Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-3084 Maven HIGH PATCH This Week

The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Privilege Escalation Elastic Cloud Foundry Uaa Bosh Cloud Foundry Cloud Foundry Elastic Runtime +2

NVD

CVSS 3.0

8.1

EPSS

0.3%

CVE-2016-0781 MEDIUM This Month

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Java Elastic Cloud Foundry Uaa Bosh Cloud Foundry +3

NVD

CVSS 3.0

6.1

EPSS

0.3%

CVE-2016-3084 Maven

EPSS 0% CVSS 8.1

HIGH PATCH This Week

Privilege Escalation Elastic Cloud Foundry Uaa Bosh +4

NVD

CVE-2016-0781

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Java Elastic +5

NVD