Pivotal Software vulnerabilities1 known to be exploited.
Pivotal Software has 144 published vulnerabilities across 57 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Cloud Foundry Uaa, with 32. If you run Pivotal Software software, patch the exploited flaws first.
The most recent Pivotal Software flaw added to the known-exploited list is CVE-2018-1273, on 25 March 2022. We keep watching the known-exploited list.
Which Pivotal Software products have the most vulnerabilities?
Cloud Foundry Uaa leads with 32 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Pivotal Software vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8VMware Tanzu Spring Data Commons Property Binder Vulnerability
Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.
Which Pivotal Software flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 97%
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements.
- 91%CVE-2013-6429Medium
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a...
- 17%CVE-2019-3778Medium
Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can...
- 11%CVE-2018-1260Critical
Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability.
- 10%CVE-2014-3625Medium
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors,...
- 8.9%CVE-2019-11269Medium
Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can...
- 6.9%CVE-2014-1904Medium
Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or...
- 6.3%CVE-2014-3578Medium
Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.
- 5.7%CVE-2016-9878High
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5.
All Pivotal Software products we track.
51 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Cloud Foundry Uaacloud_foundry_uaa32 vulnerabilities398 versions
- Cloud Foundry Elastic Runtimecloud_foundry_elastic_runtime28 vulnerabilities169 versions
- Rabbitmqrabbitmq11 vulnerabilities321 versions
- Cloud Foundrycloud_foundry10 vulnerabilities36 versions
- Operations Manageroperations_manager10 vulnerabilities267 versions
- Spring Frameworkspring_framework10 vulnerabilities159 versions
- Cloud Foundry Uaa-Releasecloud_foundry_uaa-release8 vulnerabilities157 versions
- Concourseconcourse7 vulnerabilities222 versions
- Pivotal Application Servicepivotal_application_service7 vulnerabilities494 versions
- Cloud Foundry Ops Managercloud_foundry_ops_manager5 vulnerabilities30 versions
- Application Serviceapplication_service4 vulnerabilities109 versions
- Spring Data Restspring_data_rest4 vulnerabilities79 versions
- Spring Securityspring_security4 vulnerabilities99 versions
- Spring Security Oauthspring_security_oauth4 vulnerabilities45 versions
- Spring Data Commonsspring_data_commons3 vulnerabilities81 versions
- Cloud Foundry Cf-Deploymentcloud_foundry_cf-deployment2 vulnerabilities156 versions
- Cloud Foundry Cf-Releasecloud_foundry_cf-release2 vulnerabilities214 versions
- Cloudfoundry Uaa Releasecloudfoundry_uaa_release2 vulnerabilities148 versions
- Gemfire for Pivotal Cloud Foundrygemfire_for_pivotal_cloud_foundry2 vulnerabilities7 versions
- Pivotal Container Servicepivotal_container_service2 vulnerabilities40 versions
- Spring Advanced Message Queuing Protocolspring_advanced_message_queuing_protocol2 vulnerabilities89 versions
- Spring Batchspring_batch2 vulnerabilities61 versions
- Windows Stemcellswindows_stemcells2 vulnerabilities19 versions
- Bosh CLIbosh_cli1 vulnerability166 versions
This directory lists the 51 Pivotal Software products with at least one tracked version, of 57 in our catalogue.
Running Pivotal Software? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.
- Matched to
- Spring Data Rest on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 144 published vulnerabilities across 57 products and 4,813 versions from Pivotal Software. The most recent Pivotal Software flaw added to the known-exploited list is CVE-2018-1273, on 25 March 2022.
1 Pivotal Software vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2018-1273. The full list is on this page.
Cloud Foundry Uaa, with 32 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Pivotal Software products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.