Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:pcf_single_sign-on_for_pcf:1.3.x_versions_prior_to_1.3.4,_1.4.x_versions_prior_to_1.4.3:*:*:*:*:*:*:*:*

part: a version: 1.3.x_versions_prior_to_1.3.4,_1.4.x_versions_prior_to_1.4.3 update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductPcf Single Sign On For Pcf (43f4f09b-91a8-591c-b349-de24b681f405)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8041 vulnerable 2026-06-08 05:10:07.045567 Details available
In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name.
Published: 2017-09-09T01:00:00.000Z
Updated: 2024-08-05T16:19:29.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8040 vulnerable 2026-06-08 05:10:07.041327 Details available
In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Entity) attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the Single Sign-On service broker file system.
Published: 2017-09-09T01:00:00.000Z
Updated: 2024-08-05T16:19:29.784Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.