Pivotal vulnerabilities, page 5

85 vulnerabilities

Known vulnerabilities in Pivotal products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 68 products.

7.8CVE-2019-3800anynineselasticsearch+56
EPSS score
2.09%
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.9.8CVE-2019-3801cloud foundrycf-deployment+6
EPSS score
0.59%
Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inject malicious code into the component.5.3CVE-2026-47874pivotalreactor_netty+1
EPSS score
0.40%
The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier6.5CVE-2023-20885cloud foundrycf-nfs-volume release+5
EPSS score
0.54%
Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.This issue affects Notifications: All versions prior to 63; SMB-volume release: All versions prior to 3.1.19; cf-nfs-volume release: 5.0.X versions prior to 5.0.27, 7.1.X versions prior to 7.1.19.7.5CVE-2023-34061cloud foundrycf deployment+3
EPSS score
0.54%
Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.