VMware Single Sign-on For Pivotal Cloud Foundry 1.3.2
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:single_sign-on_for_pivotal_cloud_foundry:1.3.2:*:*:*:*:*:*:*
part: a version: 1.3.2 update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Single Sign On For Pivotal Cloud Foundry (bb21fdde-ba03-5edb-9ede-997e0051ae66) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8044 |
vulnerable | 2026-06-08 05:10:07.047802 |
Details available
In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.
Published: 2017-11-27T10:00:00.000Z
Updated: 2024-08-05T16:19:29.680Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8041 |
vulnerable | 2026-06-08 05:10:07.045754 |
Details available
In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name.
Published: 2017-09-09T01:00:00.000Z
Updated: 2024-08-05T16:19:29.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8040 |
vulnerable | 2026-06-08 05:10:07.042595 |
Details available
In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Entity) attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the Single Sign-On service broker file system.
Published: 2017-09-09T01:00:00.000Z
Updated: 2024-08-05T16:19:29.784Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.