https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:38:15.960381+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-11430 cnvd-2017-11430 2026-10-16T18:38:16.004293+00:00 cnvd-2017-11430 https://cve.radiocsirt.org/vuln/euvd-2026-72975 EUVD-2026-72975 2026-10-16T18:38:16.004358+00:00 EUVD-2026-72975 https://cve.radiocsirt.org/vuln/fkie_cve-2017-4974 fkie_cve-2017-4974 2026-10-16T18:38:16.004392+00:00

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.13, 24.x versions prior to v24.8, and other versions prior to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka "Blind SQL Injection with privileged UAA endpoints."

 https://cve.radiocsirt.org/vuln/ghsa-cw9c-v3v2-99hm GHSA-cw9c-v3v2-99hm — Blind SQL Injection with privileged Cloud Foundry UAA endpoints 2026-10-16T18:38:16.004461+00:00

Affected: Maven: org.cloudfoundry.identity:cloudfoundry-identity-server

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions prior to v3.9.11, and other versions prior to v3.16.0; and UAA bosh release (uaa-release) 13.x versions prior to v13.13, 24.x versions prior to v24.8, and other versions prior to v30.1. An authorized user can use a blind SQL injection attack to query the contents of the UAA database, aka "Blind SQL Injection with privileged UAA endpoints."

 https://cve.radiocsirt.org/vuln/gsd-2017-4974 gsd-2017-4974 2026-10-16T18:38:16.004528+00:00 gsd-2017-4974