Cloud FOundry UAA

• CVE-2026-59396 Medium 4.9 DoS Vulnerability in UAA Related to JWKS URI Handling 0.3%
• CVE-2026-59357 Medium 6.5 Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions 0.2%
• CVE-2026-59358 High 7.6 UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type 0.4%
• CVE-2026-59335 High 8.7 Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise 0.5%
• CVE-2026-41005 Critical 9.0 UAA accepts SAML Encrypted Assertions authentication bypass 0.1%
• CVE-2025-22246 Low 3.0 CVE-2025-22246 – UAA Private Key Exposure 0.2%
• CVE-2020-5402 High 8.8 UAA fails to check the state parameter when authenticating with external IDPs 0.5%