← Back

Pivotal Software

pivotal_software

144 CVEs • 50 products

Products (50)

Click to collapse
Toggle
Cloud Foundry Uaa
cloud_foundry_uaa
32 CVEs
Cloud Foundry Elastic Runtime
cloud_foundry_elastic_runtime
28 CVEs
Rabbitmq
rabbitmq
11 CVEs
Spring Framework
spring_framework
10 CVEs
Operations Manager
operations_manager
10 CVEs
Cloud Foundry
cloud_foundry
10 CVEs
Cloud Foundry Uaa Release
cloud_foundry_uaa-release
8 CVEs
Concourse
concourse
7 CVEs
Pivotal Application Service
pivotal_application_service
7 CVEs
Cloud Foundry Ops Manager
cloud_foundry_ops_manager
5 CVEs
Spring Data Rest
spring_data_rest
4 CVEs
Spring Security
spring_security
4 CVEs
Spring Security Oauth
spring_security_oauth
4 CVEs
Application Service
application_service
4 CVEs
Cloud Foundry Cf
cloud_foundry_cf
3 CVEs
Spring Data Commons
spring_data_commons
3 CVEs
Gemfire For Pivotal Cloud Foundry
gemfire_for_pivotal_cloud_foundry
2 CVEs
Login Server
login-server
2 CVEs
Cloud Foundry Cf Release
cloud_foundry_cf-release
2 CVEs
Spring Advanced Message Queuing Protocol
spring_advanced_message_queuing_protocol
2 CVEs
Cloud Foundry Cf Deployment
cloud_foundry_cf-deployment
2 CVEs
Windows Stemcells
windows_stemcells
2 CVEs
Spring Batch Admin
spring_batch_admin
2 CVEs
Cloudfoundry Uaa Release
cloudfoundry_uaa_release
2 CVEs
Pivotal Container Service
pivotal_container_service
2 CVEs
Spring Batch
spring_batch
2 CVEs
Rabbitmq Management
rabbitmq_management
1 CVE
Spring Data Jpa
spring_data_jpa
1 CVE
Cloud Foundry Cf Mysql
cloud_foundry_cf_mysql
1 CVE
Greenplum
greenplum
1 CVE
Grootfs
grootfs
1 CVE
Cf Deployment
cf-deployment
1 CVE
Spring Ldap
spring-ldap
1 CVE
Credhub Release
credhub-release
1 CVE
Bosh Cli
bosh_cli
1 CVE
Gemfire
gemfire
1 CVE
Greenplum Command Center
greenplum_command_center
1 CVE
Cloud Foundry Diego
cloud_foundry_diego
1 CVE
Pivotal Cloud Cache
pivotal_cloud_cache
1 CVE
Cloudfoundry Uaa
cloudfoundry_uaa
1 CVE
Cloud Foundry Log Cache
cloud_foundry_log_cache
1 CVE
Bits Service
bits_service
1 CVE
Credhub Service Broker
credhub_service_broker
1 CVE
Broker Api
broker_api
1 CVE
On Demand Services Sdk
on_demand_services_sdk
1 CVE
Cloud Foundry Nfs Volume
cloud_foundry_nfs_volume
1 CVE
Spring Web Services
spring_web_services
1 CVE
Spring Data Java Persistence Api
spring_data_java_persistence_api
1 CVE
Spring Data Java Persistance Api
spring_data_java_persistance_api
1 CVE
Cloud Foundry Smb Volume
cloud_foundry_smb_volume
1 CVE

CVEs (144)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-0862
1Pivotal Software
1Rabbitmq Management
May 6, 2026
Jan 18, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details...Show more
Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content.Show less
CVE-2014-3625
2Pivotal Software
Vmware
2Spring Framework
Spring Framework
May 6, 2026
Nov 20, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related...Show more
Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling.Show less
CVE-2014-1904
1Pivotal Software
1Spring Framework
May 6, 2026
Mar 20, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML vi...Show more
Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.Show less
CVE-2013-6429
2Pivotal Software
Vmware
2Spring Framework
Spring Framework
Apr 29, 2026
Jan 26, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a den...Show more
The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315.Show less