Lucene search
K

CVE-2016-0781

🗓️ 25 May 2017 17:00:00Reported by dellType 
cvelist
 cvelist
🔗 www.cve.org👁 19 Views

UAA OAuth approval pages in Cloud Foundry and Pivotal Elastic Runtime versions prior to 1.6.20 are vulnerable to XSS attack via malicious Java script content in OAuth scopes or SCIM group descriptions

Related
Affected
Refs
ReporterTitlePublishedViews
Family
CNVD
HTML Injection Vulnerability in Multiple Pivotal Products
19 Jul 201600:00
cnvd
CVE
CVE-2016-0781
25 May 201717:00
cve
EUVD
EUVD-2016-0796
7 Oct 202500:30
euvd
NVD
CVE-2016-0781
25 May 201717:29
nvd
OSV
CVE-2016-0781
25 May 201717:29
osv
Prion
Design/Logic Flaw
25 May 201717:29
prion
[
  {
    "product": "Cloud Foundry",
    "vendor": "Pivotal",
    "versions": [
      {
        "status": "affected",
        "version": "v208 to v231"
      },
      {
        "status": "affected",
        "version": "Login-server v1.6 to v1.14"
      },
      {
        "status": "affected",
        "version": "UAA v2.0.0 to v2.7.4.1"
      },
      {
        "status": "affected",
        "version": "UAA v3.0.0 to v3.2.0"
      },
      {
        "status": "affected",
        "version": "UAA-Release v2 to v7"
      },
      {
        "status": "affected",
        "version": "Elastic Runtime 1.6.x versions prior to 1.6.20"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 May 2017 16:57Current
6Medium risk
Vulners AI Score6
EPSS0.00266
19