Single Sign On For Pivotal Cloud Foundry

single_sign-on_for_pivotal_cloud_foundry

Vendor: Vmware • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-8044 1Vmware 1Single Sign On For Pivotal Cloud Foundry May 13, 2026 Nov 27, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.
CVE-2017-8041 1Vmware 1Single Sign On For Pivotal Cloud Foundry May 13, 2026 Sep 9, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text...Show more In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name.Show less
CVE-2017-8040 1Vmware 1Single Sign On For Pivotal Cloud Foundry May 13, 2026 Sep 9, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Entity) attack was discovered in the Single Sign-On service dashboard. Privileged us...Show more In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Entity) attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the Single Sign-On service broker file system.Show less