Uaa release

This hub aggregates every CVE we track for Uaa release, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Uaa release.

• CVE-2025-22246CVE-2025-22246 – UAA Private Key Exposure3.0May 13, 2025
• CVE-2019-11293UAA logs all query parameters with debug logging level6.5Dec 6, 2019
• CVE-2019-11290Cloud Foundry UAA logs query parameters in tomcat access file7.5Nov 25, 2019
• CVE-2019-11282UAA is vulnerable to a Blind SCIM injection leading to information disclosure4.3Oct 23, 2019
• CVE-2019-11279Privilege Escalation via Scope Manipulation in UAA8.8Sep 26, 2019
• CVE-2019-3801Java Projects using HTTP to fetch dependencies9.8Apr 25, 2019
• CVE-2019-3788UAA redirect-uri allows wildcard in the subdomain8.7Apr 25, 2019
• CVE-2019-3775UAA allows users to modify their own email address7.1Mar 7, 2019
• CVE-2018-15754UAA can issue tokens across identity providers if users with matching usernames exist4.2Dec 13, 2018
• CVE-2018-15761UAA Privilege Escalation9.9Nov 19, 2018
• CVE-2018-11082Cloud Foundry UAA MFA does not prevent brute force of MFA code6.6Oct 5, 2018