Vulnerabilities > Pivotal Software > Cloud Foundry UAA > 3.9.13

DATE CVE VULNERABILITY TITLE RISK
2017-06-13 CVE-2017-4972 SQL Injection vulnerability in multiple products
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.12, 24.x versions prior to v24.7, and other versions prior to v30.
network
low complexity
pivotal-software cloudfoundry CWE-89
5.0
5.0
2017-06-13 CVE-2017-4963 Session Fixation vulnerability in Pivotal Software products
An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh release v26 & earlier versions. 		6.8
6.8