cveboard RSS feed

CVE-2016-0781

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2016
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions prior to 1.6.20 are vulnerable to an XSS attack by specifying malicious java script content in either the OAuth scopes (SCIM groups) or SCIM group descriptions.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cloud Foundry

Vendor
Pivotal
Product
Cloud Foundry
Platforms
Unknown
Default status
Unknown
Cloud Foundry · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
v208 to v231affectedUnavailableUnavailableUnavailableNone listed
Login-server v1.6 to v1.14affectedUnavailableUnavailableUnavailableNone listed
UAA v2.0.0 to v2.7.4.1affectedUnavailableUnavailableUnavailableNone listed
UAA v3.0.0 to v3.2.0affectedUnavailableUnavailableUnavailableNone listed
UAA-Release v2 to v7affectedUnavailableUnavailableUnavailableNone listed
Elastic Runtime 1.6.x versions prior to 1.6.20affectedUnavailableUnavailableUnavailableNone listed