CVE-2015-3190

6.1 mediumEPSS 0.7%

With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2017-05-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cloudfoundry:cf-release
pivotal_software:cloud_foundry_elastic_runtime
pivotal_software:cloud_foundry_uaa

References

https://pivotal.io/security/cve-2015-3190
https://pivotal.io/security/cve-2015-3190

Check your stack JSON