CPE Details
Pivotal Software Operations Manager 2.1.14
2.1.14
2018-11-26
17h58 +00:00
17h58 +00:00
2018-11-26
17h58 +00:00
17h58 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:pivotal_software:operations_manager:2.1.14:*:*:*:*:*:*:*
Informations
Vendor
pivotal_softwareProduct
operations_managerVersion
2.1.14Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser. | 7.2 |
Haute |
||
| Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman. | 9 |
Critique |
