Loading
Generated remediation guidance and an executive summary. No account required.
Cloud Foundry UAA, versions prior to 74.0.0, is vulnerable to an XSS attack. A remote unauthenticated malicious attacker could craft a URL that contains a SCIM filter that contains malicious JavaScript, which older browsers may execute.
Use CWE-79, Cloudfoundry vendor hub and User Account And Authentication product page to widen CVE-2019-11274 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2020-5402, CVE-2019-11278 and CVE-2016-0732 for nearby disclosures in the same product family.