Pivotal Vulnérabilités

Chronologie

Taper

Not Defined64
Cloud Software29
Virtualization Software2
JavaScript Library1
Directory Service Software1

Produit

Pivotal Cloud Foundry11
Pivotal Cloud Foundry Elastic Runtime9
Pivotal RabbitMQ8
Pivotal Application Service7
Pivotal Spring Framework5

Contre-mesures

Official Fix76
Temporary Fix0
Workaround0
Unavailable0
Not Defined21

Exploitabilité

High0
Functional0
Proof-of-Concept4
Unproven0
Not Defined93

Vecteur d'accès

Not Defined0
Physical0
Local3
Adjacent1
Network93

Authentification

Not Defined0
High2
Low26
None69

Interaction de l'utilisateur

Not Defined0
Required26
None71

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤44
≤56
≤626
≤725
≤824
≤96
≤105

CVSSv3 Temp

≤10
≤20
≤31
≤44
≤59
≤625
≤724
≤823
≤96
≤105

VulDB

≤10
≤20
≤31
≤46
≤522
≤624
≤720
≤818
≤91
≤105

NVD

≤10
≤20
≤31
≤42
≤55
≤613
≤715
≤820
≤919
≤1014

CNA

≤10
≤20
≤32
≤42
≤51
≤61
≤71
≤86
≤97
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k12
<2k50
<5k35
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k97
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (37): Application Manager (1), Application Service (7), Apps Manager (1), Cloud Cache (1), Cloud Foundry (11), Cloud Foundry Elastic Runtime (9), Cloud Foundry Ops Manager (4), Cloud Foundry Runtime (3), Concourse (5), Container Service (2), CredHub Service Broker (1), Elastic Runtime (1), GemFire for PCF (2), Greenplum (1), Greenplum Command Center (1), Operations Manager (5), Ops Manager (2), PCF Elastic Runtime (3), PCF Tile Generator (1), RabbitMQ (11), RabbitMQ management (1), Reactor Netty (1), Single Sign-On for PCF (1), Spring-LDAP (1), Spring-flex (1), Spring-integration-zip (1), Spring AMQP (2), Spring Batch Admin (2), Spring Boot (1), Spring Cloud SSO Connector (1), Spring Data JPA (1), Spring Data REST (1), Spring Framework (6), Spring Security (2), Spring Web Flow (2), tc Runtimes (1), tc Server (1)

Link to Vendor Website: https://pivotal.io/

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
15/11/20235.65.5Pivotal Reactor Netty URL directory traversalJavaScript LibraryNot DefinedOfficial Fix0.000900.04CVE-2023-34062
21/04/20239.89.5Pivotal Spring Framework elévation de privilègesInconnueProof-of-ConceptNot Defined0.024440.05CVE-2016-1000027
14/05/20206.96.6Pivotal Concourse Login Flow RedirectInconnueNot DefinedOfficial Fix0.001230.00CVE-2020-5409
27/01/20206.66.6Pivotal tc Server/tc Runtimes JMX Socket Listener elévation de privilègesInconnueNot DefinedOfficial Fix0.000420.00CVE-2019-11288
09/01/20207.37.2Pivotal Ops Manager Log Credentials divulgation de l'informationInconnueNot DefinedOfficial Fix0.000650.00CVE-2019-11292
23/11/20193.83.8Pivotal RabbitMQ Web Management Plugin dénie de serviceInconnueNot DefinedOfficial Fix0.450530.02CVE-2019-11287
22/11/20193.53.4Pivotal RabbitMQ Policy Management cross site scriptingInconnueNot DefinedOfficial Fix0.000660.02CVE-2019-11291
16/10/20192.82.7Pivotal RabbitMQ Host Limits Page/Federation Management UI cross site scriptingInconnueNot DefinedOfficial Fix0.001450.02CVE-2019-11281
01/10/20194.74.6Pivotal Application Manager CSV elévation de privilègesInconnueNot DefinedOfficial Fix0.001100.00CVE-2019-11275
20/09/20198.07.9Pivotal Application Service Apps Manager elévation de privilègesInconnueNot DefinedOfficial Fix0.002570.00CVE-2019-11280

87 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 87 results.

◂ PrécédentAperçuSuivant ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!