[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZSSheUn6hCtyWQBrUgBYCq74_ZtT2gXvE6D8S-MG-34":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":182,"kevVulnerabilities":236,"topProductsByCves":237,"seoMetadata":248,"meta":257},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":181},24885,"pivotal",41,30,0,935,"2024-01-12","p",[16,22,27,33,37,41,45,50,55,61,64,68,72,76,79,82,85,89,94,97,101,105,109,112,116,120,124,129,133,137,141,144,148,152,157,161,165,168,171,175,178],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},129265,"reactor_netty",121,6,"2023-11-28",{"id":23,"product_name":24,"version_count":11,"cve_count":25,"kev_count":11,"last_cve_update":26},129276,"vmware_harbor_registry",4,"2020-03-20",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},129270,"spring_web_flow",5,2,"2017-11-27",{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":36},129254,"cloud_foundry_notifications","2023-06-16",{"id":38,"product_name":39,"version_count":40,"cve_count":31,"kev_count":11,"last_cve_update":13},129255,"cloud_foundry_routing_release",66,{"id":42,"product_name":43,"version_count":44,"cve_count":31,"kev_count":11,"last_cve_update":13},129246,"cloud_foundry_deployment",146,{"id":46,"product_name":47,"version_count":48,"cve_count":31,"kev_count":11,"last_cve_update":49},129269,"spring_security_oauth",17,"2022-04-21",{"id":51,"product_name":52,"version_count":53,"cve_count":31,"kev_count":11,"last_cve_update":54},129248,"cloud_foundry_elastic_runtime",20,"2016-09-18",{"id":56,"product_name":57,"version_count":58,"cve_count":59,"kev_count":11,"last_cve_update":60},129247,"cloud_foundry_deployment_concourse_tasks",116,1,"2019-08-05",{"id":62,"product_name":63,"version_count":20,"cve_count":59,"kev_count":11,"last_cve_update":60},129249,"cloud_foundry_event_alerts",{"id":65,"product_name":66,"version_count":67,"cve_count":59,"kev_count":11,"last_cve_update":60},129250,"cloud_foundry_healthwatch",8,{"id":69,"product_name":70,"version_count":71,"cve_count":59,"kev_count":11,"last_cve_update":60},129251,"cloud_foundry_log_cache_release",34,{"id":73,"product_name":74,"version_count":75,"cve_count":59,"kev_count":11,"last_cve_update":60},129252,"cloud_foundry_networking_release",85,{"id":77,"product_name":78,"version_count":25,"cve_count":59,"kev_count":11,"last_cve_update":36},129253,"cloud_foundry_nfs_volume",{"id":80,"product_name":81,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":36},129256,"cloud_foundry_smb_volume",{"id":83,"product_name":84,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":60},129257,"cloud_foundry_smoke_test",{"id":86,"product_name":87,"version_count":88,"cve_count":59,"kev_count":11,"last_cve_update":60},129258,"credhub_service_broker_for_pcf",7,{"id":90,"product_name":91,"version_count":92,"cve_count":59,"kev_count":11,"last_cve_update":93},129259,"elastic_runtime",14,"2017-09-07",{"id":95,"product_name":96,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":60},129260,"metric_registrar_release",{"id":98,"product_name":99,"version_count":100,"cve_count":59,"kev_count":11,"last_cve_update":60},129261,"on_demand_service_broker",21,{"id":102,"product_name":103,"version_count":104,"cve_count":59,"kev_count":11,"last_cve_update":54},129262,"operations_manager",10,{"id":106,"product_name":107,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":108},129263,"pcf_tile_generator","2017-06-13",{"id":110,"product_name":111,"version_count":59,"cve_count":59,"kev_count":11,"last_cve_update":60},129264,"pivotal_cloud_foundry_service_broker",{"id":113,"product_name":114,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":115},129266,"routing-release","2017-10-04",{"id":117,"product_name":118,"version_count":119,"cve_count":59,"kev_count":11,"last_cve_update":60},129267,"single_sign-on",13,{"id":121,"product_name":122,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":123},129268,"spring-flex","2018-06-11",{"id":125,"product_name":126,"version_count":127,"cve_count":59,"kev_count":11,"last_cve_update":128},129271,"tc_runtimes",3,"2020-01-27",{"id":130,"product_name":131,"version_count":104,"cve_count":59,"kev_count":11,"last_cve_update":132},129237,"apps_manager","2019-10-01",{"id":134,"product_name":135,"version_count":127,"cve_count":59,"kev_count":11,"last_cve_update":136},129239,"bosh_stemcell","2017-05-25",{"id":138,"product_name":139,"version_count":140,"cve_count":59,"kev_count":11,"last_cve_update":115},129240,"capi-release",9,{"id":142,"product_name":143,"version_count":140,"cve_count":59,"kev_count":11,"last_cve_update":60},129242,"cloud_foundry_autoscaling_release",{"id":145,"product_name":146,"version_count":147,"cve_count":59,"kev_count":11,"last_cve_update":60},129243,"cloud_foundry_command_line_interface",82,{"id":149,"product_name":150,"version_count":151,"cve_count":59,"kev_count":11,"last_cve_update":60},129244,"cloud_foundry_command_line_interface_release",18,{"id":153,"product_name":154,"version_count":155,"cve_count":59,"kev_count":11,"last_cve_update":156},129245,"cloud_foundry_container_runtime",33,"2018-09-17",{"id":158,"product_name":159,"version_count":160,"cve_count":59,"kev_count":11,"last_cve_update":128},129272,"tc_server",25,{"id":162,"product_name":163,"version_count":155,"cve_count":59,"kev_count":11,"last_cve_update":164},129273,"uaa","2018-01-04",{"id":166,"product_name":167,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":164},129274,"uaa_bosh",{"id":169,"product_name":170,"version_count":11,"cve_count":59,"kev_count":11,"last_cve_update":60},129236,"application_service",{"id":172,"product_name":173,"version_count":20,"cve_count":11,"kev_count":11,"last_cve_update":174},129241,"cf-release",null,{"id":176,"product_name":177,"version_count":127,"cve_count":11,"kev_count":11,"last_cve_update":174},129275,"uaa-release",{"id":179,"product_name":180,"version_count":59,"cve_count":11,"kev_count":11,"last_cve_update":174},129238,"bits_service","Pivotal is a technology vendor with 41 tracked products and 30 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[183,191,197,202,208,213,218,222,227,232],{"cveId":184,"description":185,"publishedDate":136,"cvssScore":186,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":190},"CVE-2016-4977","When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.",8.8,"v3.0","High",false,0.79176,{"cveId":192,"description":193,"publishedDate":108,"cvssScore":194,"cvssVersion":187,"severity":195,"isKev":189,"epssScore":196},"CVE-2017-4971","An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings.",5.9,"Medium",0.15858,{"cveId":198,"description":199,"publishedDate":123,"cvssScore":200,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":201},"CVE-2017-3203","The Java implementations of AMF3 deserializers in Pivotal\u002FSpring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be able to send serialized Java objects that execute arbitrary code when deserialized.",8.1,0.06336,{"cveId":203,"description":204,"publishedDate":26,"cvssScore":205,"cvssVersion":206,"severity":188,"isKev":189,"epssScore":207},"CVE-2019-19029","Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.",7.2,"v3.1",0.02104,{"cveId":209,"description":210,"publishedDate":60,"cvssScore":211,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":212},"CVE-2019-3800","CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.",7.8,0.02088,{"cveId":214,"description":215,"publishedDate":54,"cvssScore":216,"cvssVersion":206,"severity":188,"isKev":189,"epssScore":217},"CVE-2016-6639","Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products, place the .profile file in the htdocs directory, which might allow remote attackers to obtain sensitive information via an HTTP GET request for this file.",7.5,0.01704,{"cveId":219,"description":220,"publishedDate":26,"cvssScore":186,"cvssVersion":206,"severity":188,"isKev":189,"epssScore":221},"CVE-2019-19023","Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.",0.01618,{"cveId":223,"description":224,"publishedDate":26,"cvssScore":225,"cvssVersion":206,"severity":195,"isKev":189,"epssScore":226},"CVE-2019-19026","Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.",4.9,0.01424,{"cveId":228,"description":229,"publishedDate":54,"cvssScore":230,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":231},"CVE-2016-0928","Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 and 1.7.x before 1.7.8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.",7.4,0.01383,{"cveId":233,"description":234,"publishedDate":115,"cvssScore":211,"cvssVersion":187,"severity":188,"isKev":189,"epssScore":235},"CVE-2017-8048","In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275.",0.01245,[],[238,239,240,241,242,243,244,245,246,247],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":11,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":42,"product_name":43,"version_count":44,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":46,"product_name":47,"version_count":48,"cve_count":31,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":53,"cve_count":31,"kev_count":11,"last_cve_update":54},{"id":56,"product_name":57,"version_count":58,"cve_count":59,"kev_count":11,"last_cve_update":60},{"id":62,"product_name":63,"version_count":20,"cve_count":59,"kev_count":11,"last_cve_update":60},{"title":249,"metaDescription":250,"keywords":251,"structuredData":252},"Pivotal - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Pivotal covering 41 products with 30 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Pivotal vulnerabilities, Pivotal security, Pivotal CVE, Pivotal threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":253,"@type":254,"name":255,"description":250,"url":256},"https:\u002F\u002Fschema.org","Organization","Pivotal","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fpivotal",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":258,"apiVersion":259},"2026-10-28T19:54:07.536Z","3.0"]