Pivotal Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	80
Cloud Software	14
Virtualization Software	2
Directory Service Software	2

Product

Pivotal Application Service	8
Pivotal RabbitMQ	8
Pivotal Concourse	6
Pivotal Operations Manager	6
Pivotal Cloud Foundry	6

Remediation

Official Fix	68
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	30

Exploitability

High	0
Functional	0
Proof-of-Concept	6
Unproven	0
Not Defined	92

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	2
Network	94

Authentication

Not Defined	0
High	2
Low	24
None	72

User Interaction

Not Defined	0
Required	22
None	76

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	2
≤5	8
≤6	28
≤7	22
≤8	22
≤9	8
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	2
≤5	8
≤6	28
≤7	22
≤8	22
≤9	8
≤10	6

VulDB

≤1	0
≤2	0
≤3	0
≤4	8
≤5	24
≤6	30
≤7	14
≤8	16
≤9	0
≤10	6

NVD

≤1	0
≤2	0
≤3	2
≤4	2
≤5	4
≤6	12
≤7	12
≤8	16
≤9	16
≤10	22

CNA

≤1	0
≤2	0
≤3	2
≤4	0
≤5	0
≤6	2
≤7	2
≤8	4
≤9	12
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	10
<2k	60
<5k	28
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	98
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (37): Application Manager (1), Application Service (7), Apps Manager (1), Cloud Cache (1), Cloud Foundry (11), Cloud Foundry Elastic Runtime (9), Cloud Foundry Ops Manager (4), Cloud Foundry Runtime (3), Concourse (5), Container Service (2), CredHub Service Broker (1), Elastic Runtime (1), GemFire for PCF (2), Greenplum (1), Greenplum Command Center (1), Operations Manager (5), Ops Manager (2), PCF Elastic Runtime (3), PCF Tile Generator (1), RabbitMQ (11), RabbitMQ management (1), Reactor Netty (1), Single Sign-On for PCF (1), Spring-LDAP (1), Spring-flex (1), Spring-integration-zip (1), Spring AMQP (2), Spring Batch Admin (2), Spring Boot (1), Spring Cloud SSO Connector (1), Spring Data JPA (1), Spring Data REST (1), Spring Framework (6), Spring Security (2), Spring Web Flow (2), tc Runtimes (1), tc Server (1)

Link to Vendor Website: https://pivotal.io/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
11/15/2023	5.6	5.5	Pivotal Reactor Netty URL path traversal	JavaScript Library	Not Defined	Official Fix	0.00141	0.04	CVE-2023-34062
04/21/2023	9.8	9.5	Pivotal Spring Framework deserialization	Unknown	Proof-of-Concept	Not Defined	0.02444	0.06	CVE-2016-1000027
05/14/2020	6.9	6.6	Pivotal Concourse Login Flow redirect	Unknown	Not Defined	Official Fix	0.00123	0.05	CVE-2020-5409
01/27/2020	6.6	6.6	Pivotal tc Server/tc Runtimes JMX Socket Listener privileges management	Unknown	Not Defined	Official Fix	0.00042	0.00	CVE-2019-11288
01/09/2020	7.3	7.2	Pivotal Ops Manager Log Credentials log file	Unknown	Not Defined	Official Fix	0.00065	0.00	CVE-2019-11292
11/23/2019	3.8	3.8	Pivotal RabbitMQ Web Management Plugin resource consumption	Unknown	Not Defined	Official Fix	0.45053	0.07	CVE-2019-11287
11/22/2019	3.5	3.4	Pivotal RabbitMQ Policy Management cross site scripting	Unknown	Not Defined	Official Fix	0.00066	0.00	CVE-2019-11291
10/16/2019	2.8	2.7	Pivotal RabbitMQ Host Limits Page/Federation Management UI cross site scripting	Unknown	Not Defined	Official Fix	0.00167	0.03	CVE-2019-11281
10/01/2019	4.7	4.6	Pivotal Application Manager CSV permission assignment	Unknown	Not Defined	Official Fix	0.00110	0.00	CVE-2019-11275
09/20/2019	8.0	7.9	Pivotal Application Service Apps Manager privileges management	Unknown	Not Defined	Official Fix	0.00257	0.00	CVE-2019-11280