p
pivotal
Security Risk Profile
50
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 47 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 14, 2014 to present
47
Total CVEs
27
Critical+High
2
Exploited
21
Unpatched
Threat Assessment
Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
21
Critical/High
Risk Level
50/100
medium
⚠️ 2 Active Exploits📈 1 in Last 30 Days
Severity Distribution
Critical
3High
24Medium
17Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
CSRF
2
3
XSS
2
4
Infoleak
2
5
SQL Injection
2
Most Affected Products
1. Cloudfoundry User Account And Authentication33
2. Pivotal Cloud Foundry Elastic Runtime29
3. Pivotal Spring Security Oauth18
4. Pivotal Elastic Runtime14
5. IBM Operational Decision Manager12
Recent Vulnerabilities
See more →CVE-2026-59326
CVSS 3.3low
HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
Jul 30, 2026🔧 No Patch
CVE-2026-51947
CVSS 9.8critical
Jul 1, 2026🔧 No Patch
CVE-2026-39253
CVSS 8.1high
Jun 23, 2026🔧 No Patch
REDHAT-BUG-2467621
CVSS 7.0high
May 7, 2026🔧 No Patch
CVE-2026-2818
CVSS 8.2EPSS 0%high
Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)
Feb 20, 2026🔧 No Patch
CVE-2025-41254
CVSS 4.3medium
Spring Framework STOMP CSRF Vulnerability
Oct 16, 2025
REDHAT-BUG-2395723
CVSS 7.0high
Sep 16, 2025🔧 No Patch
CVE-2025-48927
CVSS 5.3EPSS 0%medium
TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
May 28, 2025⚠ Exploited🔧 No Patch
CVE-2025-30219
CVSS 6.1EPSS 0%medium
RabbitMQ has XSS Vulnerability in an Error Message in Management UI
Mar 25, 2025
https://www.theregister.com/2025/01/23/oracle_patch_linux/
unknown
Oracle emits 603 patches, names one it wants you to worry about soon
Jan 23, 2025⚠ Exploited🔧 No Patch
Monitor pivotal in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.