Vendor
pivotal
Public exploit6Avg CVSS6.8
CVEs in the catalog
67
since 2017-05
Months in the top 100
22
months with a stored rank
Best rank
#6
one month recomputed
History
CVEs per ranked month
Last 22 of 22 ranked months. 0% of its CVEs are on the CISA KEV catalog.
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| cloud foundry | 10 | 15% |
| spring framework | 7 | 10% |
| concourse | 4 | 6% |
| pivotal application service | 4 | 6% |
| pivotal ops manager | 4 | 6% |
| apps manager | 3 | 4% |
| rabbitmq | 3 | 4% |
| reactor netty | 3 | 4% |
| spring security | 3 | 4% |
| spring security oauth | 3 | 4% |
| application service | 2 | 3% |
| pivotal application service pas | 2 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-522 | 3 | 4% |
| CWE-79 | 3 | 4% |
| CWE-200 | 2 | 3% |
| CWE-269 | 2 | 3% |
| CWE-532 | 2 | 3% |
| CWE-601 | 2 | 3% |
| CWE-20 | 1 | 1% |
| CWE-295 | 1 | 1% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2020-5409 | CWE-601 | none yet | 7.6 | 2020-05-13 |
| CVE-2020-5406 | CWE-522 | none yet | n/a | 2020-04-10 |
| CVE-2020-5403 | CWE-20 | none yet | 6.5 | 2020-03-03 |
| CVE-2020-5404 | CWE-522 | none yet | 6.5 | 2020-03-03 |
| CVE-2019-11288 | CWE-269 | none yet | 7.3 | 2020-01-27 |
| CVE-2013-6430 | n/a | none yet | n/a | 2020-01-10 |
| CVE-2019-11292 | CWE-532 | none yet | 8.8 | 2020-01-08 |
| CVE-2019-11287 | CWE-400 | 1 | 4.5 | 2019-11-22 |
| CVE-2019-11291 | CWE-79 | none yet | 3.1 | 2019-11-22 |
| CVE-2019-11284 | CWE-522 | none yet | 6.8 | 2019-10-17 |
| CVE-2019-11281 | CWE-79 | none yet | 2.4 | 2019-10-16 |
| CVE-2019-11275 | CWE-74 | none yet | 3.5 | 2019-10-01 |
| CVE-2019-11280 | CWE-269 | none yet | 8.8 | 2019-09-20 |
| CVE-2019-11276 | CWE-319 | none yet | 5.4 | 2019-08-19 |
| CVE-2019-11273 | CWE-532 | none yet | 2.2 | 2019-07-23 |