Advisories · Technology

Pivotal Apps Manager.

Every CVE that names Pivotal Apps Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-11275 CVE record

CVSS 3.5 Low

CSV Injection in usage report downloaded from Pivotal Application Manager
- Pivotal Apps Manager
- Other injection
Not analysed yet 1 Oct 2019
CVE-2019-3793 CVE record

CVSS 8.1 High

Invitations Service supports HTTP connections
- Pivotal Apps Manager
- CWE-300
Not analysed yet 24 Apr 2019
CVE-2019-3777 CVE record

CVSS 8.0 High

Apps Manager unverified SSL certs in Cloud Controller proxy
- Pivotal Apps Manager
- Pivotal Application Service
- Weak cryptography or TLS
Not analysed yet 7 Mar 2019