CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1190

An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint used for single logout session management.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.5%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-1190

Cloudfoundry » Cf-Release » Version: 100

cpe:2.3:a:cloudfoundry:cf-release:100
Cloudfoundry » Cf-Release » Version: 101

cpe:2.3:a:cloudfoundry:cf-release:101
Cloudfoundry » Cf-Release » Version: 102

cpe:2.3:a:cloudfoundry:cf-release:102
Cloudfoundry » Cf-Release » Version: 103

cpe:2.3:a:cloudfoundry:cf-release:103
Cloudfoundry » Cf-Release » Version: 104

cpe:2.3:a:cloudfoundry:cf-release:104
Cloudfoundry » Cf-Release » Version: 105

cpe:2.3:a:cloudfoundry:cf-release:105
Cloudfoundry » Cf-Release » Version: 106

cpe:2.3:a:cloudfoundry:cf-release:106
Cloudfoundry » Cf-Release » Version: 107

cpe:2.3:a:cloudfoundry:cf-release:107
Cloudfoundry » Cf-Release » Version: 108

cpe:2.3:a:cloudfoundry:cf-release:108
Cloudfoundry » Cf-Release » Version: 109

cpe:2.3:a:cloudfoundry:cf-release:109
Cloudfoundry » Cf-Release » Version: 110

cpe:2.3:a:cloudfoundry:cf-release:110
Cloudfoundry » Cf-Release » Version: 111

cpe:2.3:a:cloudfoundry:cf-release:111
Cloudfoundry » Cf-Release » Version: 112

cpe:2.3:a:cloudfoundry:cf-release:112
Cloudfoundry » Cf-Release » Version: 113

cpe:2.3:a:cloudfoundry:cf-release:113
Cloudfoundry » Cf-Release » Version: 114

cpe:2.3:a:cloudfoundry:cf-release:114
Cloudfoundry » Cf-Release » Version: 115

cpe:2.3:a:cloudfoundry:cf-release:115
Cloudfoundry » Cf-Release » Version: 116

cpe:2.3:a:cloudfoundry:cf-release:116
Cloudfoundry » Cf-Release » Version: 117

cpe:2.3:a:cloudfoundry:cf-release:117
Cloudfoundry » Cf-Release » Version: 118

cpe:2.3:a:cloudfoundry:cf-release:118
Cloudfoundry » Cf-Release » Version: 119

cpe:2.3:a:cloudfoundry:cf-release:119
Cloudfoundry » Cf-Release » Version: 120

cpe:2.3:a:cloudfoundry:cf-release:120
Cloudfoundry » Cf-Release » Version: 121

cpe:2.3:a:cloudfoundry:cf-release:121
Cloudfoundry » Cf-Release » Version: 122

cpe:2.3:a:cloudfoundry:cf-release:122
Cloudfoundry » Cf-Release » Version: 123

cpe:2.3:a:cloudfoundry:cf-release:123
Cloudfoundry » Cf-Release » Version: 124

cpe:2.3:a:cloudfoundry:cf-release:124
Cloudfoundry » Cf-Release » Version: 125

cpe:2.3:a:cloudfoundry:cf-release:125
Cloudfoundry » Cf-Release » Version: 126

cpe:2.3:a:cloudfoundry:cf-release:126
Cloudfoundry » Cf-Release » Version: 127

cpe:2.3:a:cloudfoundry:cf-release:127
Cloudfoundry » Cf-Release » Version: 128

cpe:2.3:a:cloudfoundry:cf-release:128
Cloudfoundry » Cf-Release » Version: 129

cpe:2.3:a:cloudfoundry:cf-release:129
Cloudfoundry » Cf-Release » Version: 130

cpe:2.3:a:cloudfoundry:cf-release:130
Cloudfoundry » Cf-Release » Version: 131

cpe:2.3:a:cloudfoundry:cf-release:131
Cloudfoundry » Cf-Release » Version: 132

cpe:2.3:a:cloudfoundry:cf-release:132
Cloudfoundry » Cf-Release » Version: 133

cpe:2.3:a:cloudfoundry:cf-release:133
Cloudfoundry » Cf-Release » Version: 134

cpe:2.3:a:cloudfoundry:cf-release:134
Cloudfoundry » Cf-Release » Version: 135

cpe:2.3:a:cloudfoundry:cf-release:135
Cloudfoundry » Cf-Release » Version: 136

cpe:2.3:a:cloudfoundry:cf-release:136
Cloudfoundry » Cf-Release » Version: 137

cpe:2.3:a:cloudfoundry:cf-release:137
Cloudfoundry » Cf-Release » Version: 138

cpe:2.3:a:cloudfoundry:cf-release:138
Cloudfoundry » Cf-Release » Version: 139

cpe:2.3:a:cloudfoundry:cf-release:139
Cloudfoundry » Cf-Release » Version: 140

cpe:2.3:a:cloudfoundry:cf-release:140
Cloudfoundry » Cf-Release » Version: 141

cpe:2.3:a:cloudfoundry:cf-release:141
Cloudfoundry » Cf-Release » Version: 142

cpe:2.3:a:cloudfoundry:cf-release:142
Cloudfoundry » Cf-Release » Version: 143

cpe:2.3:a:cloudfoundry:cf-release:143
Cloudfoundry » Cf-Release » Version: 144

cpe:2.3:a:cloudfoundry:cf-release:144
Cloudfoundry » Cf-Release » Version: 145

cpe:2.3:a:cloudfoundry:cf-release:145
Cloudfoundry » Cf-Release » Version: 146

cpe:2.3:a:cloudfoundry:cf-release:146
Cloudfoundry » Cf-Release » Version: 147

cpe:2.3:a:cloudfoundry:cf-release:147
Cloudfoundry » Cf-Release » Version: 148

cpe:2.3:a:cloudfoundry:cf-release:148
Cloudfoundry » Cf-Release » Version: 149

cpe:2.3:a:cloudfoundry:cf-release:149
Cloudfoundry » Cf-Release » Version: 150

cpe:2.3:a:cloudfoundry:cf-release:150
Cloudfoundry » Cf-Release » Version: 151

cpe:2.3:a:cloudfoundry:cf-release:151
Cloudfoundry » Cf-Release » Version: 152

cpe:2.3:a:cloudfoundry:cf-release:152
Cloudfoundry » Cf-Release » Version: 153

cpe:2.3:a:cloudfoundry:cf-release:153
Cloudfoundry » Cf-Release » Version: 154

cpe:2.3:a:cloudfoundry:cf-release:154
Cloudfoundry » Cf-Release » Version: 155

cpe:2.3:a:cloudfoundry:cf-release:155
Cloudfoundry » Cf-Release » Version: 156

cpe:2.3:a:cloudfoundry:cf-release:156
Cloudfoundry » Cf-Release » Version: 157

cpe:2.3:a:cloudfoundry:cf-release:157
Cloudfoundry » Cf-Release » Version: 158

cpe:2.3:a:cloudfoundry:cf-release:158
Cloudfoundry » Cf-Release » Version: 159

cpe:2.3:a:cloudfoundry:cf-release:159
Cloudfoundry » Cf-Release » Version: 160

cpe:2.3:a:cloudfoundry:cf-release:160
Cloudfoundry » Cf-Release » Version: 161

cpe:2.3:a:cloudfoundry:cf-release:161
Cloudfoundry » Cf-Release » Version: 162

cpe:2.3:a:cloudfoundry:cf-release:162
Cloudfoundry » Cf-Release » Version: 163

cpe:2.3:a:cloudfoundry:cf-release:163
Cloudfoundry » Cf-Release » Version: 164

cpe:2.3:a:cloudfoundry:cf-release:164
Cloudfoundry » Cf-Release » Version: 165

cpe:2.3:a:cloudfoundry:cf-release:165
Cloudfoundry » Cf-Release » Version: 166

cpe:2.3:a:cloudfoundry:cf-release:166
Cloudfoundry » Cf-Release » Version: 167

cpe:2.3:a:cloudfoundry:cf-release:167
Cloudfoundry » Cf-Release » Version: 168

cpe:2.3:a:cloudfoundry:cf-release:168
Cloudfoundry » Cf-Release » Version: 169

cpe:2.3:a:cloudfoundry:cf-release:169
Cloudfoundry » Cf-Release » Version: 170

cpe:2.3:a:cloudfoundry:cf-release:170
Cloudfoundry » Cf-Release » Version: 171

cpe:2.3:a:cloudfoundry:cf-release:171
Cloudfoundry » Cf-Release » Version: 172

cpe:2.3:a:cloudfoundry:cf-release:172
Cloudfoundry » Cf-Release » Version: 173

cpe:2.3:a:cloudfoundry:cf-release:173
Cloudfoundry » Cf-Release » Version: 174

cpe:2.3:a:cloudfoundry:cf-release:174
Cloudfoundry » Cf-Release » Version: 175

cpe:2.3:a:cloudfoundry:cf-release:175
Cloudfoundry » Cf-Release » Version: 176

cpe:2.3:a:cloudfoundry:cf-release:176
Cloudfoundry » Cf-Release » Version: 177

cpe:2.3:a:cloudfoundry:cf-release:177
Cloudfoundry » Cf-Release » Version: 178

cpe:2.3:a:cloudfoundry:cf-release:178
Cloudfoundry » Cf-Release » Version: 179

cpe:2.3:a:cloudfoundry:cf-release:179
Cloudfoundry » Cf-Release » Version: 180

cpe:2.3:a:cloudfoundry:cf-release:180
Cloudfoundry » Cf-Release » Version: 181

cpe:2.3:a:cloudfoundry:cf-release:181
Cloudfoundry » Cf-Release » Version: 182

cpe:2.3:a:cloudfoundry:cf-release:182
Cloudfoundry » Cf-Release » Version: 183

cpe:2.3:a:cloudfoundry:cf-release:183
Cloudfoundry » Cf-Release » Version: 184

cpe:2.3:a:cloudfoundry:cf-release:184
Cloudfoundry » Cf-Release » Version: 185

cpe:2.3:a:cloudfoundry:cf-release:185
Cloudfoundry » Cf-Release » Version: 186

cpe:2.3:a:cloudfoundry:cf-release:186
Cloudfoundry » Cf-Release » Version: 187

cpe:2.3:a:cloudfoundry:cf-release:187
Cloudfoundry » Cf-Release » Version: 188

cpe:2.3:a:cloudfoundry:cf-release:188
Cloudfoundry » Cf-Release » Version: 189

cpe:2.3:a:cloudfoundry:cf-release:189
Cloudfoundry » Cf-Release » Version: 190

cpe:2.3:a:cloudfoundry:cf-release:190
Cloudfoundry » Cf-Release » Version: 191

cpe:2.3:a:cloudfoundry:cf-release:191
Cloudfoundry » Cf-Release » Version: 192

cpe:2.3:a:cloudfoundry:cf-release:192
Cloudfoundry » Cf-Release » Version: 193

cpe:2.3:a:cloudfoundry:cf-release:193
Cloudfoundry » Cf-Release » Version: 194

cpe:2.3:a:cloudfoundry:cf-release:194
Cloudfoundry » Cf-Release » Version: 195

cpe:2.3:a:cloudfoundry:cf-release:195
Cloudfoundry » Cf-Release » Version: 196

cpe:2.3:a:cloudfoundry:cf-release:196
Cloudfoundry » Cf-Release » Version: 197

cpe:2.3:a:cloudfoundry:cf-release:197
Cloudfoundry » Cf-Release » Version: 198

cpe:2.3:a:cloudfoundry:cf-release:198
Cloudfoundry » Cf-Release » Version: 199

cpe:2.3:a:cloudfoundry:cf-release:199
Cloudfoundry » Cf-Release » Version: 200

cpe:2.3:a:cloudfoundry:cf-release:200
Cloudfoundry » Cf-Release » Version: 201

cpe:2.3:a:cloudfoundry:cf-release:201
Cloudfoundry » Cf-Release » Version: 202

cpe:2.3:a:cloudfoundry:cf-release:202
Cloudfoundry » Cf-Release » Version: 203

cpe:2.3:a:cloudfoundry:cf-release:203
Cloudfoundry » Cf-Release » Version: 204

cpe:2.3:a:cloudfoundry:cf-release:204
Cloudfoundry » Cf-Release » Version: 205

cpe:2.3:a:cloudfoundry:cf-release:205
Cloudfoundry » Cf-Release » Version: 206

cpe:2.3:a:cloudfoundry:cf-release:206
Cloudfoundry » Cf-Release » Version: 207

cpe:2.3:a:cloudfoundry:cf-release:207
Cloudfoundry » Cf-Release » Version: 208

cpe:2.3:a:cloudfoundry:cf-release:208
Cloudfoundry » Cf-Release » Version: 209

cpe:2.3:a:cloudfoundry:cf-release:209
Cloudfoundry » Cf-Release » Version: 210

cpe:2.3:a:cloudfoundry:cf-release:210
Cloudfoundry » Cf-Release » Version: 211

cpe:2.3:a:cloudfoundry:cf-release:211
Cloudfoundry » Cf-Release » Version: 212

cpe:2.3:a:cloudfoundry:cf-release:212
Cloudfoundry » Cf-Release » Version: 213

cpe:2.3:a:cloudfoundry:cf-release:213
Cloudfoundry » Cf-Release » Version: 214

cpe:2.3:a:cloudfoundry:cf-release:214
Cloudfoundry » Cf-Release » Version: 215

cpe:2.3:a:cloudfoundry:cf-release:215
Cloudfoundry » Cf-Release » Version: 216

cpe:2.3:a:cloudfoundry:cf-release:216
Cloudfoundry » Cf-Release » Version: 217

cpe:2.3:a:cloudfoundry:cf-release:217
Cloudfoundry » Cf-Release » Version: 218

cpe:2.3:a:cloudfoundry:cf-release:218
Cloudfoundry » Cf-Release » Version: 219

cpe:2.3:a:cloudfoundry:cf-release:219
Cloudfoundry » Cf-Release » Version: 220

cpe:2.3:a:cloudfoundry:cf-release:220
Cloudfoundry » Cf-Release » Version: 221

cpe:2.3:a:cloudfoundry:cf-release:221
Cloudfoundry » Cf-Release » Version: 222

cpe:2.3:a:cloudfoundry:cf-release:222
Cloudfoundry » Cf-Release » Version: 223

cpe:2.3:a:cloudfoundry:cf-release:223
Cloudfoundry » Cf-Release » Version: 224

cpe:2.3:a:cloudfoundry:cf-release:224
Cloudfoundry » Cf-Release » Version: 225

cpe:2.3:a:cloudfoundry:cf-release:225
Cloudfoundry » Cf-Release » Version: 226

cpe:2.3:a:cloudfoundry:cf-release:226
Cloudfoundry » Cf-Release » Version: 227

cpe:2.3:a:cloudfoundry:cf-release:227
Cloudfoundry » Cf-Release » Version: 228

cpe:2.3:a:cloudfoundry:cf-release:228
Cloudfoundry » Cf-Release » Version: 229

cpe:2.3:a:cloudfoundry:cf-release:229
Cloudfoundry » Cf-Release » Version: 230

cpe:2.3:a:cloudfoundry:cf-release:230
Cloudfoundry » Cf-Release » Version: 231

cpe:2.3:a:cloudfoundry:cf-release:231
Cloudfoundry » Cf-Release » Version: 232

cpe:2.3:a:cloudfoundry:cf-release:232
Cloudfoundry » Cf-Release » Version: 233

cpe:2.3:a:cloudfoundry:cf-release:233
Cloudfoundry » Cf-Release » Version: 234

cpe:2.3:a:cloudfoundry:cf-release:234
Cloudfoundry » Cf-Release » Version: 235

cpe:2.3:a:cloudfoundry:cf-release:235
Cloudfoundry » Cf-Release » Version: 236

cpe:2.3:a:cloudfoundry:cf-release:236
Cloudfoundry » Cf-Release » Version: 237

cpe:2.3:a:cloudfoundry:cf-release:237
Cloudfoundry » Cf-Release » Version: 238

cpe:2.3:a:cloudfoundry:cf-release:238
Cloudfoundry » Cf-Release » Version: 239

cpe:2.3:a:cloudfoundry:cf-release:239
Cloudfoundry » Cf-Release » Version: 240

cpe:2.3:a:cloudfoundry:cf-release:240
Cloudfoundry » Cf-Release » Version: 241

cpe:2.3:a:cloudfoundry:cf-release:241
Cloudfoundry » Cf-Release » Version: 242

cpe:2.3:a:cloudfoundry:cf-release:242
Cloudfoundry » Cf-Release » Version: 243

cpe:2.3:a:cloudfoundry:cf-release:243
Cloudfoundry » Cf-Release » Version: 244

cpe:2.3:a:cloudfoundry:cf-release:244
Cloudfoundry » Cf-Release » Version: 245

cpe:2.3:a:cloudfoundry:cf-release:245
Cloudfoundry » Cf-Release » Version: 246

cpe:2.3:a:cloudfoundry:cf-release:246
Cloudfoundry » Cf-Release » Version: 247

cpe:2.3:a:cloudfoundry:cf-release:247
Cloudfoundry » Cf-Release » Version: 248

cpe:2.3:a:cloudfoundry:cf-release:248
Cloudfoundry » Cf-Release » Version: 249

cpe:2.3:a:cloudfoundry:cf-release:249
Cloudfoundry » Cf-Release » Version: 250

cpe:2.3:a:cloudfoundry:cf-release:250
Cloudfoundry » Cf-Release » Version: 251

cpe:2.3:a:cloudfoundry:cf-release:251
Cloudfoundry » Cf-Release » Version: 252

cpe:2.3:a:cloudfoundry:cf-release:252
Cloudfoundry » Cf-Release » Version: 253

cpe:2.3:a:cloudfoundry:cf-release:253
Cloudfoundry » Cf-Release » Version: 254

cpe:2.3:a:cloudfoundry:cf-release:254
Cloudfoundry » Cf-Release » Version: 255

cpe:2.3:a:cloudfoundry:cf-release:255
Cloudfoundry » Cf-Release » Version: 256

cpe:2.3:a:cloudfoundry:cf-release:256
Cloudfoundry » Cf-Release » Version: 257

cpe:2.3:a:cloudfoundry:cf-release:257
Cloudfoundry » Cf-Release » Version: 258

cpe:2.3:a:cloudfoundry:cf-release:258
Cloudfoundry » Cf-Release » Version: 259

cpe:2.3:a:cloudfoundry:cf-release:259
Cloudfoundry » Cf-Release » Version: 260

cpe:2.3:a:cloudfoundry:cf-release:260
Cloudfoundry » Cf-Release » Version: 261

cpe:2.3:a:cloudfoundry:cf-release:261
Cloudfoundry » Cf-Release » Version: 262

cpe:2.3:a:cloudfoundry:cf-release:262
Cloudfoundry » Cf-Release » Version: 263

cpe:2.3:a:cloudfoundry:cf-release:263
Cloudfoundry » Cf-Release » Version: 264

cpe:2.3:a:cloudfoundry:cf-release:264
Cloudfoundry » Cf-Release » Version: 265

cpe:2.3:a:cloudfoundry:cf-release:265
Cloudfoundry » Cf-Release » Version: 266

cpe:2.3:a:cloudfoundry:cf-release:266
Cloudfoundry » Cf-Release » Version: 267

cpe:2.3:a:cloudfoundry:cf-release:267
Cloudfoundry » Cf-Release » Version: 268

cpe:2.3:a:cloudfoundry:cf-release:268
Cloudfoundry » Cf-Release » Version: 269

cpe:2.3:a:cloudfoundry:cf-release:269
Cloudfoundry » Cf-Release » Version: 68

cpe:2.3:a:cloudfoundry:cf-release:68
Cloudfoundry » Cf-Release » Version: 69

cpe:2.3:a:cloudfoundry:cf-release:69
Cloudfoundry » Cf-Release » Version: 70

cpe:2.3:a:cloudfoundry:cf-release:70
Cloudfoundry » Cf-Release » Version: 71

cpe:2.3:a:cloudfoundry:cf-release:71
Cloudfoundry » Cf-Release » Version: 72

cpe:2.3:a:cloudfoundry:cf-release:72
Cloudfoundry » Cf-Release » Version: 73

cpe:2.3:a:cloudfoundry:cf-release:73
Cloudfoundry » Cf-Release » Version: 74

cpe:2.3:a:cloudfoundry:cf-release:74
Cloudfoundry » Cf-Release » Version: 75

cpe:2.3:a:cloudfoundry:cf-release:75
Cloudfoundry » Cf-Release » Version: 76

cpe:2.3:a:cloudfoundry:cf-release:76
Cloudfoundry » Cf-Release » Version: 77

cpe:2.3:a:cloudfoundry:cf-release:77
Cloudfoundry » Cf-Release » Version: 78

cpe:2.3:a:cloudfoundry:cf-release:78
Cloudfoundry » Cf-Release » Version: 79

cpe:2.3:a:cloudfoundry:cf-release:79
Cloudfoundry » Cf-Release » Version: 80

cpe:2.3:a:cloudfoundry:cf-release:80
Cloudfoundry » Cf-Release » Version: 81

cpe:2.3:a:cloudfoundry:cf-release:81
Cloudfoundry » Cf-Release » Version: 82

cpe:2.3:a:cloudfoundry:cf-release:82
Cloudfoundry » Cf-Release » Version: 83

cpe:2.3:a:cloudfoundry:cf-release:83
Cloudfoundry » Cf-Release » Version: 84

cpe:2.3:a:cloudfoundry:cf-release:84
Cloudfoundry » Cf-Release » Version: 85

cpe:2.3:a:cloudfoundry:cf-release:85
Cloudfoundry » Cf-Release » Version: 86

cpe:2.3:a:cloudfoundry:cf-release:86
Cloudfoundry » Cf-Release » Version: 87

cpe:2.3:a:cloudfoundry:cf-release:87
Cloudfoundry » Cf-Release » Version: 88

cpe:2.3:a:cloudfoundry:cf-release:88
Cloudfoundry » Cf-Release » Version: 89

cpe:2.3:a:cloudfoundry:cf-release:89
Cloudfoundry » Cf-Release » Version: 90

cpe:2.3:a:cloudfoundry:cf-release:90
Cloudfoundry » Cf-Release » Version: 91

cpe:2.3:a:cloudfoundry:cf-release:91
Cloudfoundry » Cf-Release » Version: 92

cpe:2.3:a:cloudfoundry:cf-release:92
Cloudfoundry » Cf-Release » Version: 93

cpe:2.3:a:cloudfoundry:cf-release:93
Cloudfoundry » Cf-Release » Version: 94

cpe:2.3:a:cloudfoundry:cf-release:94
Cloudfoundry » Cf-Release » Version: 95

cpe:2.3:a:cloudfoundry:cf-release:95
Cloudfoundry » Cf-Release » Version: 96

cpe:2.3:a:cloudfoundry:cf-release:96
Cloudfoundry » Cf-Release » Version: 97

cpe:2.3:a:cloudfoundry:cf-release:97
Cloudfoundry » Cf-Release » Version: 98

cpe:2.3:a:cloudfoundry:cf-release:98
Cloudfoundry » Cf-Release » Version: 99

cpe:2.3:a:cloudfoundry:cf-release:99
Pivotal » Uaa » Version: Any

cpe:2.3:a:pivotal:uaa:*
Pivotal » Uaa Bosh » Version: Any

cpe:2.3:a:pivotal:uaa_bosh:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1190

Products

Pricing

Contact Us