Uaa Release Security Vulnerabilities and Issues — Uaa Release CVE List

Lucene search

CloudfoundryUaa Release

2 matches found

CVE•added 2019/03/07 7:0 p.m.•37 views

CVE-2019-3775

Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user by changing their email address to that of a different user.

7.1CVSS6.4AI score0.00132EPSS

CVE•added 2025/05/13 6:15 a.m.•34 views

CVE-2025-22246

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.

7.5CVSS3.8AI score0.00034EPSS