Pivotal vulnerabilities

CVEs per yearBy the year they were published

1. 20174
2. 20173
3. 201826
4. 20181
5. 201810
6. 20204
7. 202018
8. 20201

Newest CVEs

• CVE-2020-5409

  Concourse Open Redirect in the /sky/login endpoint

  Pivotal · Concourse

  High7.6
• CVE-2020-5406

  PCF Autoscaling logs its database credentials

  Pivotal · VMware Tanzu Application Service for VMs

  Medium6.5
• CVE-2020-5403

  DoS Via Malformed URL with Reactor Netty HTTP Server

  Pivotal · Reactor Netty

  Medium6.5
• CVE-2020-5404

  Authentication Leak On Redirect With Reactor Netty HttpClient

  Pivotal · Reactor Netty

  Medium6.5
• CVE-2019-11288

  tcServer JMX Socket Listener Registry Rebinding Local Privilege Escalation

  Pivotal · Pivotal tc Server 4.x

  High7.3
• CVE-2013-6430

  The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain…

  Pivotal · Spring MVC

  Medium5.4
• CVE-2019-11292

  Pivotal Ops Manager logs query parameters in tomcat access file

  Pivotal · Pivotal Ops Manager

  High8.8
• CVE-2019-11287

  RabbitMQ Web Management Plugin DoS via heap overflow

  Pivotal · RabbitMQ for Pivotal Platform

  Medium4.5
• CVE-2019-11291

  RabbitMQ XSS attack via federation and shovel endpoints

  Pivotal · RabbitMQ

  Low3.1
• CVE-2019-11284

  Reactor Netty authentication leak in redirects

  Pivotal · Reactor Netty

  Medium6.8