Pivotal Software Login-Server vulnerabilities

2 CVEs affecting Pivotal Software Login-Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-3084, published 2017-05-25.

More from Pivotal Software.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-3084, published 2017-05-25. High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days. The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal…
• CVE-2016-0781, published 2017-05-25. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions…