CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-0781

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions prior to 1.6.20 are vulnerable to an XSS attack by specifying malicious java script content in either the OAuth scopes (SCIM groups) or SCIM group descriptions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2016-0781

Cloudfoundry » Cloud Foundry Uaa Bosh » Version: 2

cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:2
Cloudfoundry » Cloud Foundry Uaa Bosh » Version: 3

cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:3
Cloudfoundry » Cloud Foundry Uaa Bosh » Version: 4

cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:4
Cloudfoundry » Cloud Foundry Uaa Bosh » Version: 5

cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:5
Cloudfoundry » Cloud Foundry Uaa Bosh » Version: 6

cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:6
Cloudfoundry » Cloud Foundry Uaa Bosh » Version: 7

cpe:2.3:a:cloudfoundry:cloud_foundry_uaa_bosh:7
Pivotal Software » Cloud Foundry » Version: 208

cpe:2.3:a:pivotal_software:cloud_foundry:208
Pivotal Software » Cloud Foundry » Version: 209

cpe:2.3:a:pivotal_software:cloud_foundry:209
Pivotal Software » Cloud Foundry » Version: 210

cpe:2.3:a:pivotal_software:cloud_foundry:210
Pivotal Software » Cloud Foundry » Version: 211

cpe:2.3:a:pivotal_software:cloud_foundry:211
Pivotal Software » Cloud Foundry » Version: 212

cpe:2.3:a:pivotal_software:cloud_foundry:212
Pivotal Software » Cloud Foundry » Version: 213

cpe:2.3:a:pivotal_software:cloud_foundry:213
Pivotal Software » Cloud Foundry » Version: 214

cpe:2.3:a:pivotal_software:cloud_foundry:214
Pivotal Software » Cloud Foundry » Version: 215

cpe:2.3:a:pivotal_software:cloud_foundry:215
Pivotal Software » Cloud Foundry » Version: 216

cpe:2.3:a:pivotal_software:cloud_foundry:216
Pivotal Software » Cloud Foundry » Version: 217

cpe:2.3:a:pivotal_software:cloud_foundry:217
Pivotal Software » Cloud Foundry » Version: 218

cpe:2.3:a:pivotal_software:cloud_foundry:218
Pivotal Software » Cloud Foundry » Version: 219

cpe:2.3:a:pivotal_software:cloud_foundry:219
Pivotal Software » Cloud Foundry » Version: 220

cpe:2.3:a:pivotal_software:cloud_foundry:220
Pivotal Software » Cloud Foundry » Version: 221

cpe:2.3:a:pivotal_software:cloud_foundry:221
Pivotal Software » Cloud Foundry » Version: 222

cpe:2.3:a:pivotal_software:cloud_foundry:222
Pivotal Software » Cloud Foundry » Version: 223

cpe:2.3:a:pivotal_software:cloud_foundry:223
Pivotal Software » Cloud Foundry » Version: 224

cpe:2.3:a:pivotal_software:cloud_foundry:224
Pivotal Software » Cloud Foundry » Version: 225

cpe:2.3:a:pivotal_software:cloud_foundry:225
Pivotal Software » Cloud Foundry » Version: 226

cpe:2.3:a:pivotal_software:cloud_foundry:226
Pivotal Software » Cloud Foundry » Version: 227

cpe:2.3:a:pivotal_software:cloud_foundry:227
Pivotal Software » Cloud Foundry » Version: 228

cpe:2.3:a:pivotal_software:cloud_foundry:228
Pivotal Software » Cloud Foundry » Version: 229

cpe:2.3:a:pivotal_software:cloud_foundry:229
Pivotal Software » Cloud Foundry » Version: 230

cpe:2.3:a:pivotal_software:cloud_foundry:230
Pivotal Software » Cloud Foundry » Version: 231

cpe:2.3:a:pivotal_software:cloud_foundry:231
Pivotal Software » Cloud Foundry » Version: 241

cpe:2.3:a:pivotal_software:cloud_foundry:241
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.0

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.1

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.10

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.11

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.12

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.13

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.14

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.15

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.16

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.16
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.17

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.18

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.18
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.19

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.19
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.2

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.3

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.4

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.5

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.6

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.7

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.8

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8
Pivotal Software » Cloud Foundry Elastic Runtime » Version: 1.6.9

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9
Pivotal Software » Cloud Foundry Uaa » Version: 1.0.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.0.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.0.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.0.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.0.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.0.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.0.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.0.3
Pivotal Software » Cloud Foundry Uaa » Version: 1.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.1.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.1.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.1.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.1.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.10

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.10
Pivotal Software » Cloud Foundry Uaa » Version: 1.11

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.11
Pivotal Software » Cloud Foundry Uaa » Version: 1.2.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.2.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.2.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.2.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.2.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.2.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.2.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.2.3
Pivotal Software » Cloud Foundry Uaa » Version: 1.2.4

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.2.4
Pivotal Software » Cloud Foundry Uaa » Version: 1.2.5

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.2.5
Pivotal Software » Cloud Foundry Uaa » Version: 1.2.6

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.2.6
Pivotal Software » Cloud Foundry Uaa » Version: 1.3.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.3.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.3.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.3.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.3
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.4

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.4
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.5

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.5
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.6

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.6
Pivotal Software » Cloud Foundry Uaa » Version: 1.4.7

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.4.7
Pivotal Software » Cloud Foundry Uaa » Version: 1.5.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.5.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.5.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.5.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.5.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.5.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.5.2.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.5.2.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.5.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.5.3
Pivotal Software » Cloud Foundry Uaa » Version: 1.5.4

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.5.4
Pivotal Software » Cloud Foundry Uaa » Version: 1.5.4.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.5.4.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.6.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.6.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.6.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.6.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.6.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.6.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.6.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.6.3
Pivotal Software » Cloud Foundry Uaa » Version: 1.6.4

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.6.4
Pivotal Software » Cloud Foundry Uaa » Version: 1.6.5

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.6.5
Pivotal Software » Cloud Foundry Uaa » Version: 1.7.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.7.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.7.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.7.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.7.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.7.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.8.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.8.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.8.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.8.1
Pivotal Software » Cloud Foundry Uaa » Version: 1.8.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.8.2
Pivotal Software » Cloud Foundry Uaa » Version: 1.8.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.8.3
Pivotal Software » Cloud Foundry Uaa » Version: 1.9.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.9.0
Pivotal Software » Cloud Foundry Uaa » Version: 1.9.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:1.9.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.0.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.0.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.0.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.0.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.0.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.0.2
Pivotal Software » Cloud Foundry Uaa » Version: 2.0.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.0.3
Pivotal Software » Cloud Foundry Uaa » Version: 2.1.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.1.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.2
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.3
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.4

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.4
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.4.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.4.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.5

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.5.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.2
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.5.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.3
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.5.4

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.5.4
Pivotal Software » Cloud Foundry Uaa » Version: 2.2.6

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.2.6
Pivotal Software » Cloud Foundry Uaa » Version: 2.3.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.3.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.3.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.3.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.3.1.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.3.1.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.4.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.4.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.4.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.4.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.5.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.5.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.5.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.5.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.5.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.5.2
Pivotal Software » Cloud Foundry Uaa » Version: 2.6.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.6.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.6.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.6.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.6.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.6.2
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.0.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.0.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0.2
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.0.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.0.3
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.1
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.2

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.2
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.3

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.3
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.4

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4
Pivotal Software » Cloud Foundry Uaa » Version: 2.7.4.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:2.7.4.1
Pivotal Software » Cloud Foundry Uaa » Version: 3.0.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.0.0
Pivotal Software » Cloud Foundry Uaa » Version: 3.0.1

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.0.1
Pivotal Software » Cloud Foundry Uaa » Version: 3.1.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.1.0
Pivotal Software » Cloud Foundry Uaa » Version: 3.2.0

cpe:2.3:a:pivotal_software:cloud_foundry_uaa:3.2.0
Pivotal Software » Login-Server » Version: N/A

cpe:2.3:a:pivotal_software:login-server:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-0781

Products

Pricing

Contact Us