CVE-2019-11274

Summary: CVE-2019-11274 affects Cloud Foundry UAA prior to v74.0.0, enabling a remote, unauthenticated attacker to craft a URL containing a SCIM filter that can execute malicious JavaScript (XSS) in older browsers. The root cause is insufficient sanitization of SCIM filter handling in UAA. Impact...

CVE-2021-22098

CVE-2021-22098 affects Cloud Foundry UAA server. Versions prior to 75.4.0 are vulnerable to an open redirect vulnerability exploitable via social engineering, potentially leading to loss of user accounts and redirection to malicious sites. Practical impact is limited to cases described in vendor ...