Pivotal - vulnerabilities (CVEs)

86 CVEs in 72 products, 0 in the last 30 days, newest from 2026-08-26.

Products

Cloud Foundry - 10 CVEs
Spring Framework - 7 CVEs
Concourse - 4 CVEs
Pivotal Application Service - 4 CVEs
Vmware Harbor Registry - 4 CVEs
Apps Manager - 3 CVEs
Pivotal Ops Manager - 3 CVEs
Rabbitmq - 3 CVEs
Reactor Netty - 3 CVEs
Spring Security - 3 CVEs
Spring Security Oauth - 3 CVEs
Application Service - 2 CVEs
Cloud Foundry Deployment - 2 CVEs
Cloud Foundry Elastic Runtime - 2 CVEs
Cloud Foundry Notifications - 2 CVEs
Cloud Foundry Routing Release - 2 CVEs
Pivotal Application Service Pas - 2 CVEs
Pivotal Operations Manager - 2 CVEs
Rabbitmq For Pcf - 2 CVEs
Rabbitmq For Pivotal Platform - 2 CVEs
Spring Integration Zip - 2 CVEs
Bosh Stemcell - 1 CVEs
Capi-release - 1 CVEs
Cloud Cache - 1 CVEs
Cloud Foundry Autoscaling Release - 1 CVEs
Cloud Foundry Command Line Interface - 1 CVEs
Cloud Foundry Command Line Interface Release - 1 CVEs
Cloud Foundry Container Runtime - 1 CVEs
Cloud Foundry Deployment Concourse Tasks - 1 CVEs
Cloud Foundry Event Alerts - 1 CVEs
Cloud Foundry Healthwatch - 1 CVEs
Cloud Foundry Log Cache Release - 1 CVEs
Cloud Foundry Networking Release - 1 CVEs
Cloud Foundry Nfs Volume - 1 CVEs
Cloud Foundry Smb Volume - 1 CVEs
Cloud Foundry Smoke Test - 1 CVEs
Credhub Service Broker For Pcf - 1 CVEs
Elastic Runtime - 1 CVEs
Gemfire For Pcf - 1 CVEs
Greenplum Command Center - 1 CVEs
Metric Registrar Release - 1 CVEs
On Demand Service Broker - 1 CVEs
On Demand Services Sdk - 1 CVEs
Operations Manager - 1 CVEs
Pcf Tile Generator - 1 CVEs
Pivotal-ops-manager - 1 CVEs
Pivotal Cloud Foundry Elastic Runtime - 1 CVEs
Pivotal Cloud Foundry Service Broker - 1 CVEs
Pivotal Container Service - 1 CVEs
Pivotal Container Service Pks - 1 CVEs
Pivotal Spring Data Rest And Spring Boot - 1 CVEs
Pivotal Tc Server 3.x - 1 CVEs
Pivotal Tc Server 3.x Runtimes - 1 CVEs
Pivotal Tc Server 4.x - 1 CVEs
Pivotal Tc Server 4.x Runtimes - 1 CVEs
Routing-release - 1 CVEs
Single Sign-on - 1 CVEs
Spring-flex - 1 CVEs
Spring Amqp - 1 CVEs
Spring Cloud Sso Connector - 1 CVEs
Spring Data Commons - 1 CVEs
Spring Mvc - 1 CVEs
Tc Runtimes - 1 CVEs
Tc Server - 1 CVEs
Uaa - 1 CVEs
Uaa Bosh - 1 CVEs
Uaa Release Lts - 1 CVEs
Vmware Tanzu Application Service For Vms - 1 CVEs
Bits Service - 0 CVEs
Cf-release - 0 CVEs
Spring Web Flow - 0 CVEs
Uaa-release - 0 CVEs

Newest CVEs of Pivotal

CVE-2026-47874 - CVSS 5.3 (medium), 2026-08-26: The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an…
CVE-2023-34061 - CVSS 7.5 (high), 2024-01-12: Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to…
CVE-2023-20885 - CVSS 6.5 (medium), 2023-06-16: Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.This issue affects Notifications: All…
CVE-2022-22969 - CVSS 6.5 (medium), 2022-04-21: <Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via…
CVE-2020-5409 - CVSS 7.6 (high), 2020-05-14: Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a…
CVE-2020-5406 - CVSS 6.5 (medium), 2020-04-10: VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a…
CVE-2019-19026 - CVSS 4.9 (medium), 2020-03-20: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the…
CVE-2019-19025 - CVSS 8.8 (high), 2020-03-20: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.
CVE-2019-19023 - CVSS 8.8 (high), 2020-03-20: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the…
CVE-2019-19029 - CVSS 7.2 (high), 2020-03-20: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal…
CVE-2020-5403 - CVSS 7.5 (high), 2020-03-03: Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of…
CVE-2020-5404 - CVSS 6.5 (medium), 2020-03-03: The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak…
CVE-2019-11288 - CVSS 7.3 (high), 2020-01-27: In Pivotal tc Server, 3.x versions prior to 3.2.19 and 4.x versions prior to 4.0.10, and Pivotal tc Runtimes, 7.x versions prior to 7.0.99.B, 8.x versions…
CVE-2013-6430 - CVSS 5.4 (medium), 2020-01-10: The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain…
CVE-2019-11292 - CVSS 8.8 (high), 2020-01-09: Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to…
CVE-2019-11287 - CVSS 7.5 (high), 2019-11-23: Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x…
CVE-2019-11291 - CVSS 4.8 (medium), 2019-11-22: Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions…
CVE-2019-11284 - CVSS 8.6 (high), 2019-10-17: Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may…
CVE-2019-11281 - CVSS 4.8 (medium), 2019-10-16: Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x…
CVE-2019-11275 - CVSS 4.3 (medium), 2019-10-01: Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x…
CVE-2019-11280 - CVSS 8.8 (high), 2019-09-20: Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to…
CVE-2019-11276 - CVSS 5.4 (medium), 2019-08-19: Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5.x prior to 2.5.8, and 2.6.x prior to…
CVE-2019-3800 - CVSS 7.8 (high), 2019-08-05: CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with…
CVE-2019-11273 - CVSS 4.3 (medium), 2019-07-23: Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and…
CVE-2019-3790 - CVSS 6.1 (medium), 2019-06-06: The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3,…
CVE-2019-3788 - CVSS 8.7 (high), 2019-04-25: Cloud Foundry UAA Release, versions prior to 71.0, allows clients to be configured with an insecure redirect uri. Given a UAA client was configured with a…
CVE-2019-3801 - CVSS 9.8 (critical), 2019-04-25: Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A…
CVE-2019-3793 - CVSS 9.8 (critical), 2019-04-24: Pivotal Apps Manager Release, versions 665.0.x prior to 665.0.28, versions 666.0.x prior to 666.0.21, versions 667.0.x prior to 667.0.7, contain an invitation…
CVE-2019-3792 - CVSS 7.5 (high), 2019-04-01: Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a…
CVE-2019-3777 - CVSS 9.8 (critical), 2019-03-07: Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud…