https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T07:22:39.683048+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-09727 cnvd-2017-09727 2026-10-16T07:22:39.686258+00:00 cnvd-2017-09727 https://cve.radiocsirt.org/vuln/euvd-2026-83402 EUVD-2026-83402 2026-10-16T07:22:39.686291+00:00 EUVD-2026-83402 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3084 fkie_cve-2016-3084 2026-10-16T07:22:39.686306+00:00

The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple active codes at a given time. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.

 https://cve.radiocsirt.org/vuln/ghsa-fm5c-2rwc-887w GHSA-fm5c-2rwc-887w — Cloud Foundry UAA reset password vulnerable to brute force attack 2026-10-16T07:22:39.686335+00:00

Affected: Maven: org.cloudfoundry.identity:cloudfoundry-identity-server

The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier versions and Pivotal Elastic Runtime versions prior to 1.7.2 is vulnerable to a brute force attack due to multiple active codes at a given time. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected.

 https://cve.radiocsirt.org/vuln/gsd-2016-3084 gsd-2016-3084 2026-10-16T07:22:39.686359+00:00 gsd-2016-3084