Known vulnerabilities in VMware Carbon Black App Control Server

Vendor: Broadcom
Software: VMware Carbon Black App Control Server
Software CPE: cpe:2.3:a:broadcom:carbon_black_app_control_server:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Carbon Black App Control Server VMware Carbon Black App Control Server is affected by 4 known vulnerabilities: 1 high, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72471 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-20858		 CWE-94 Low
No
No
 8.7.8, 8.8.6, 8.9.4 21.02.2023 SB2023022179
#VU61570 - Unrestricted Upload of File with Dangerous Type
CVE-2022-22952		 CWE-434 Low
No
No
 8.5.14, 8.6.6, 8.7.4, 8.8.2 23.03.2022 SB2022032311
#VU61569 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-22951		 CWE-78 Low
No
No
 8.5.14, 8.6.6, 8.7.4, 8.8.2 23.03.2022 SB2022032311
#VU54312 - Improper Authentication
CVE-2021-21998		 CWE-287 High
No
No
 8.5.8, 8.6.2 22.06.2021 SB2021062224