CVE-2017-8044

6.1 mediumEPSS 0.9%

In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-11-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:single_sign-on_for_pivotal_cloud_foundry

References

http://www.securityfocus.com/bid/100618
https://pivotal.io/security/cve-2017-8044
http://www.securityfocus.com/bid/100618
https://pivotal.io/security/cve-2017-8044

Check your stack JSON