Vulnerabilities > Pivotal Software > Cloud Foundry UAA Release > 61.0

DATE	CVE	VULNERABILITY TITLE	RISK
2019-07-11	CVE-2019-11268	Information Exposure vulnerability in Pivotal Software Cloud Foundry Uaa-Release Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. network low complexity pivotal-software CWE-200	4.0
2019-06-19	CVE-2019-3787	Weak Password Recovery Mechanism for Forgotten Password vulnerability in Pivotal Software Cloud Foundry Uaa-Release Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @ character. network pivotal-software CWE-640	4.3
2018-12-13	CVE-2018-15754	Incorrect Authorization vulnerability in Pivotal Software Cloud Foundry Uaa-Release Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. network low complexity pivotal-software CWE-863	4.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.