# CVEs published 2016-09-30

5 CVEs were published on September 30, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-0617](https://cve.now/CVE-2016-0617.md): Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors. (no CVSS)
- [CVE-2016-6636](https://cve.now/CVE-2016-6636.md): The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x befo (no CVSS)
- [CVE-2016-6637](https://cve.now/CVE-2016-6637.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3 (no CVSS, org.cloudfoundry.identity:cloudfoundry-identity-server)
- [CVE-2016-6647](https://cve.now/CVE-2016-6647.md): Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HT (no CVSS)
- [CVE-2016-6651](https://cve.now/CVE-2016-6651.md): The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-09-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.