Cloudfoundry Foundation Uaa
2 CVEs affecting Cloudfoundry Foundation Uaa. Latest disclosed: 2026-07-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-47840 | High | 7.5 | 2026-07-09 | A network attacker positioned between UAA and its LDAP directory can impersonate the directory using any certificate from any trusted CA, then harvest the LDAP… |
CVE-2026-22723 | Medium | 6.5 | 2026-03-05 | Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfo… |