CVE-2017-8044

Published: Nov 27, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.

Affected (5)

Products: Vmware: Single Sign On For Pivotal Cloud Foundry

Vmware

1 product

Single Sign On For Pivotal Cloud Foundry

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Vmware Single Sign On For Pivotal Cloud Foundry	Version 1.3.0
Vmware Single Sign On For Pivotal Cloud Foundry	Version 1.3.2
Vmware Single Sign On For Pivotal Cloud Foundry	Version 1.3.3
Vmware Single Sign On For Pivotal Cloud Foundry	Version 1.4.1
Vmware Single Sign On For Pivotal Cloud Foundry	Version 1.4.2