Pivotal application service

This hub aggregates every CVE we track for Pivotal application service, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Pivotal application service.

• CVE-2019-11275CSV Injection in usage report downloaded from Pivotal Application Manager4.3Oct 1, 2019
• CVE-2019-11280Privilege escalation through the invitations service8.8Sep 20, 2019
• CVE-2019-3788UAA redirect-uri allows wildcard in the subdomain8.7Apr 25, 2019
• CVE-2019-3777Apps Manager unverified SSL certs in Cloud Controller proxy8.0Mar 7, 2019
• CVE-2018-11086Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space d...8.8Sep 17, 2018
• CVE-2018-11088Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A ...8.8Sep 17, 2018
• CVE-2018-11044Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2.1.x prior to 2.1.8 and 2.0.x prior to 2.0.17 and 1.12.x prior to 1.12.26, does not escape all user-...6.5Jul 24, 2018
• CVE-2018-1278Apps Manager included in Pivotal Application Service, versions 1.12.x prior to 1.12.22, 2.0.x prior to 2.0.13, and 2.1.x prior to 2.1.4 contains an authorization enforcement vulnerability. A member...6.5May 11, 2018
• CVE-2018-1200Apps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14, and 2.0.x before 2.0.5) allows unprivileged remote file read in its container via specially-crafted l...6.5Mar 16, 2018