Medium severity6.1NVD Advisory· Published Sep 18, 2016· Updated Jun 17, 2026
CVE-2016-0926
CVE-2016-0926
Description
Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or HTML via unspecified input that improperly interacts with the AngularJS framework.
Affected products
2cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*range: >=1.6.0,<1.6.32
- (no CPE)range: <1.6.32, <1.7.8
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/91677nvdThird Party AdvisoryVDB Entry
- pivotal.io/security/cve-2016-0926nvdVendor Advisory
News mentions
0No linked articles in our index yet.