[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZSSheUn6hCtyWQBrUgBYCq74_ZtT2gXvE6D8S-MG-34":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":182,"kevVulnerabilities":237,"topProductsByCves":238,"seoMetadata":249,"meta":258},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":181},24885,"pivotal",41,30,0,935,"2024-01-12","p",[16,22,27,33,37,41,45,50,55,61,64,68,72,76,79,82,85,89,94,97,101,105,109,112,116,120,124,129,133,137,141,144,148,152,157,161,165,168,171,175,178],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},129265,"reactor_netty",121,6,"2023-11-28",{"id":23,"product_name":24,"version_count":11,"cve_count":25,"kev_count":11,"last_cve_update":26},129276,"vmware_harbor_registry",4,"2020-03-20",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},129270,"spring_web_flow",5,2,"2017-11-27",{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":36},129254,"cloud_foundry_notifications","2023-06-16",{"id":38,"product_name":39,"version_count":40,"cve_count":31,"kev_count":11,"last_cve_update":13},129255,"cloud_foundry_routing_release",66,{"id":42,"product_name":43,"version_count":44,"cve_count":31,"kev_count":11,"last_cve_update":13},129246,"cloud_foundry_deployment",146,{"id":46,"product_name":47,"version_count":48,"cve_count":31,"kev_count":11,"last_cve_update":49},129269,"spring_security_oauth",17,"2022-04-21",{"id":51,"product_name":52,"version_count":53,"cve_count":31,"kev_count":11,"last_cve_update":54},129248,"cloud_foundry_elastic_runtime",20,"2016-09-18",{"id":56,"product_name":57,"version_count":58,"cve_count":59,"kev_count":11,"last_cve_update":60},129247,"cloud_foundry_deployment_concourse_tasks",116,1,"2019-08-05",{"id":62,"product_name":63,"version_count":20,"cve_count":59,"kev_count":11,"last_cve_update":60},129249,"cloud_foundry_event_alerts",{"id":65,"product_name":66,"version_count":67,"cve_count":59,"kev_count":11,"last_cve_update":60},129250,"cloud_foundry_healthwatch",8,{"id":69,"product_name":70,"version_count":71,"cve_count":59,"kev_count":11,"last_cve_update":60},129251,"cloud_foundry_log_cache_release",34,{"id":73,"product_name":74,"version_count":75,"cve_count":59,"kev_count":11,"last_cve_update":60},129252,"cloud_foundry_networking_release",85,{"id":77,"product_name":78,"version_count":25,"cve_count":59,"kev_count":11,"last_cve_update":36},129253,"cloud_foundry_nfs_volume",{"id":80,"product_name":81,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":36},129256,"cloud_foundry_smb_volume",{"id":83,"product_name":84,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":60},129257,"cloud_foundry_smoke_test",{"id":86,"product_name":87,"version_count":88,"cve_count":59,"kev_count":11,"last_cve_update":60},129258,"credhub_service_broker_for_pcf",7,{"id":90,"product_name":91,"version_count":92,"cve_count":59,"kev_count":11,"last_cve_update":93},129259,"elastic_runtime",14,"2017-09-07",{"id":95,"product_name":96,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":60},129260,"metric_registrar_release",{"id":98,"product_name":99,"version_count":100,"cve_count":59,"kev_count":11,"last_cve_update":60},129261,"on_demand_service_broker",21,{"id":102,"product_name":103,"version_count":104,"cve_count":59,"kev_count":11,"last_cve_update":54},129262,"operations_manager",10,{"id":106,"product_name":107,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":108},129263,"pcf_tile_generator","2017-06-13",{"id":110,"product_name":111,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":60},129264,"pivotal_cloud_foundry_service_broker",{"id":113,"product_name":114,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":115},129266,"routing-release","2017-10-04",{"id":117,"product_name":118,"version_count":119,"cve_count":59,"kev_count":11,"last_cve_update":60},129267,"single_sign-on",13,{"id":121,"product_name":122,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":123},129268,"spring-flex","2018-06-11",{"id":125,"product_name":126,"version_count":127,"cve_count":59,"kev_count":11,"last_cve_update":128},129271,"tc_runtimes",3,"2020-01-27",{"id":130,"product_name":131,"version_count":104,"cve_count":59,"kev_count":11,"last_cve_update":132},129237,"apps_manager","2019-10-01",{"id":134,"product_name":135,"version_count":127,"cve_count":59,"kev_count":11,"last_cve_update":136},129239,"bosh_stemcell","2017-05-25",{"id":138,"product_name":139,"version_count":140,"cve_count":59,"kev_count":11,"last_cve_update":115},129240,"capi-release",9,{"id":142,"product_name":143,"version_count":140,"cve_count":59,"kev_count":11,"last_cve_update":60},129242,"cloud_foundry_autoscaling_release",{"id":145,"product_name":146,"version_count":147,"cve_count":59,"kev_count":11,"last_cve_update":60},129243,"cloud_foundry_command_line_interface",82,{"id":149,"product_name":150,"version_count":151,"cve_count":59,"kev_count":11,"last_cve_update":60},129244,"cloud_foundry_command_line_interface_release",18,{"id":153,"product_name":154,"version_count":155,"cve_count":59,"kev_count":11,"last_cve_update":156},129245,"cloud_foundry_container_runtime",33,"2018-09-17",{"id":158,"product_name":159,"version_count":160,"cve_count":59,"kev_count":11,"last_cve_update":128},129272,"tc_server",25,{"id":162,"product_name":163,"version_count":155,"cve_count":59,"kev_count":11,"last_cve_update":164},129273,"uaa","2018-01-04",{"id":166,"product_name":167,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":164},129274,"uaa_bosh",{"id":169,"product_name":170,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":60},129236,"application_service",{"id":172,"product_name":173,"version_count":20,"cve_count":11,"kev_count":11,"last_cve_update":174},129241,"cf-release",null,{"id":176,"product_name":177,"version_count":127,"cve_count":11,"kev_count":11,"last_cve_update":174},129275,"uaa-release",{"id":179,"product_name":180,"version_count":59,"cve_count":11,"kev_count":11,"last_cve_update":174},129238,"bits_service","Pivotal is a technology vendor with 41 tracked products and 30 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[183,191,197,202,208,213,218,222,227,232],{"cveId":184,"description":185,"publishedDate":136,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":190},"CVE-2016-4977","When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.",8.8,"v3.0","High",false,0.79176,{"cveId":192,"description":193,"publishedDate":108,"cvssScore":194,"cvssVersion":187,"severity":195,"isKev":189,"epssScore":196},"CVE-2017-4971","An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings.",5.9,"Medium",0.14688,{"cveId":198,"description":199,"publishedDate":123,"cvssScore":200,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":201},"CVE-2017-3203","The Java implementations of AMF3 deserializers in Pivotal\u002FSpring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.",8.1,0.0631,{"cveId":203,"description":204,"publishedDate":26,"cvssScore":205,"cvssVersion":206,"severity":188,"isKev":189,"epssScore":207},"CVE-2019-19029","Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.",7.2,"v3.1",0.02104,{"cveId":209,"description":210,"publishedDate":60,"cvssScore":211,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":212},"CVE-2019-3800","CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.",7.8,0.02088,{"cveId":214,"description":215,"publishedDate":54,"cvssScore":216,"cvssVersion":206,"severity":188,"isKev":189,"epssScore":217},"CVE-2016-6639","Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products, place the .profile file in the htdocs directory, which might allow remote attackers to obtain sensitive information via an HTTP GET request for this file.",7.5,0.01704,{"cveId":219,"description":220,"publishedDate":26,"cvssScore":186,"cvssVersion":206,"severity":188,"isKev":189,"epssScore":221},"CVE-2019-19023","Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.",0.01618,{"cveId":223,"description":224,"publishedDate":26,"cvssScore":225,"cvssVersion":206,"severity":195,"isKev":189,"epssScore":226},"CVE-2019-19026","Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.",4.9,0.01424,{"cveId":228,"description":229,"publishedDate":54,"cvssScore":230,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":231},"CVE-2016-0928","Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.",7.4,0.01383,{"cveId":233,"description":234,"publishedDate":49,"cvssScore":235,"cvssVersion":206,"severity":195,"isKev":189,"epssScore":236},"CVE-2022-22969","\u003CIssue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client application. A malicious user or attacker can send multiple requests initiating the Authorization Request for the Authorization Code Grant, which has the potential of exhausting system resources using a single session. This vulnerability exposes OAuth 2.0 Client applications only.",6.5,0.01253,[],[239,240,241,242,243,244,245,246,247,248],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":11,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":42,"product_name":43,"version_count":44,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":46,"product_name":47,"version_count":48,"cve_count":31,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":53,"cve_count":31,"kev_count":11,"last_cve_update":54},{"id":56,"product_name":57,"version_count":58,"cve_count":59,"kev_count":11,"last_cve_update":60},{"id":62,"product_name":63,"version_count":20,"cve_count":59,"kev_count":11,"last_cve_update":60},{"title":250,"metaDescription":251,"keywords":252,"structuredData":253},"Pivotal - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Pivotal covering 41 products with 30 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Pivotal vulnerabilities, Pivotal security, Pivotal CVE, Pivotal threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":254,"@type":255,"name":256,"description":251,"url":257},"https:\u002F\u002Fschema.org","Organization","Pivotal","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpivotal",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":259,"apiVersion":260},"2026-10-18T23:02:20.107Z","3.0"]