p
pivotal
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 50 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 14, 2014 to present
50
Total CVEs
28
Critical+High
2
Exploited
22
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
22
Critical/High
Risk Level
45/100
medium
⚠️ 2 Active Exploits📈 3 in Last 30 Days
Severity Distribution
Critical
3High
25Medium
18Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
CSRF
2
3
XSS
2
4
Infoleak
2
5
SQL Injection
2
Most Affected Products
1. Cloudfoundry User Account And Authentication33
2. Pivotal Cloud Foundry Elastic Runtime29
3. Pivotal Spring Security Oauth18
4. Pivotal Elastic Runtime14
5. Pivotal Reactor Netty13
Recent Vulnerabilities
See more →CVE-2026-59302
CVSS 3.1low
Potential for logging sensitive data in Spring Cloud Stream
Aug 27, 2026🔧 No Patch
CVE-2026-59285
CVSS 8.1high
Spring for GraphQL Unsafe Deserialization in pagination support
Aug 27, 2026🔧 No Patch
CVE-2026-47874
CVSS 5.3medium
Reactor Netty HTTP Server Denial of Service With Pipelined Requests
Aug 26, 2026🔧 No Patch
CVE-2026-59326
CVSS 3.3low
HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
Jul 30, 2026🔧 No Patch
CVE-2026-51947
CVSS 9.8critical
Jul 1, 2026🔧 No Patch
CVE-2026-39253
CVSS 8.1high
Jun 23, 2026🔧 No Patch
REDHAT-BUG-2467621
CVSS 7.0high
May 7, 2026🔧 No Patch
CVE-2026-2818
CVSS 8.2EPSS 0%high
Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)
Feb 20, 2026🔧 No Patch
CVE-2025-41254
CVSS 4.3medium
Spring Framework STOMP CSRF Vulnerability
Oct 16, 2025
REDHAT-BUG-2395723
CVSS 7.0high
Sep 16, 2025🔧 No Patch
Monitor pivotal in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.