Filtered by vendor Vmware Subscriptions
Filtered by product Single Sign-on For Pivotal Cloud Foundry Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-8044 1 Vmware 1 Single Sign-on For Pivotal Cloud Foundry 2024-11-21 6.1 Medium
In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.
CVE-2017-8041 1 Vmware 1 Single Sign-on For Pivotal Cloud Foundry 2024-11-21 6.1 Medium
In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name.
CVE-2017-8040 1 Vmware 1 Single Sign-on For Pivotal Cloud Foundry 2024-11-21 6.5 Medium
In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External Entity) attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the Single Sign-On service broker file system.