p
pivotal software
Security Risk Profile
50
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 223 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 19, 2012 to present
223
Total CVEs
104
Critical+High
1
Exploited
73
Unpatched
Threat Assessment
Avg CVSS
7.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
73
Critical/High
Risk Level
50/100
medium
⚠️ 1 Active Exploits📈 5 in Last 30 Days
Severity Distribution
Critical
32High
72Medium
46Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Infoleak
17
2
XSS
15
3
Input Validation
10
4
SQL Injection
7
5
Path Traversal
5
Most Affected Products
1. Pivotal Software Cloud Foundry Elastic Runtime684
2. Pivotal Software Cloud Foundry Uaa381
3. Cloudfoundry Cloud Foundry Uaa Bosh213
4. Pivotal Software Rabbitmq Pivotal Cloud Foundry182
5. VMware Spring Framework134
Recent Vulnerabilities
See more →CVE-2026-59316
CVSS 8.2high
Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
Aug 27, 2026🔧 No Patch
CVE-2026-59304
CVSS 3.8low
Improper caching of the original content type in Spring Cloud Stream Avro
Aug 27, 2026
CVE-2026-59286
CVSS 8.1high
Spring for GraphQL loads Untrusted Resources in GraphiQL support
Aug 27, 2026🔧 No Patch
CVE-2026-47890
CVSS 9.8critical
Spring Framework Server Sent Event stream corruption while rendering fragments
Aug 27, 2026🔧 No Patch
CVE-2026-47894
CVSS 7.5high
Spring Cloud Config Server Native Environment Repository Exposure
Aug 27, 2026🔧 No Patch
CVE-2026-59328
CVSS 4.2medium
Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips
Jul 30, 2026🔧 No Patch
EOL-spring-boot-4.1
unknown
Jun 30, 2026
REDHAT-BUG-2467619
CVSS 7.0high
May 7, 2026🔧 No Patch
REDHAT-BUG-2463322
CVSS 7.0high
Apr 28, 2026🔧 No Patch
EOL-rabbitmq-4.3
unknown
Apr 23, 2026
Monitor pivotal software in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.