Known vulnerabilities in Cloud Foundation 4.0

Vendor: Broadcom
Version: 4.0
Software CPE: cpe:2.3:a:broadcom:vmware_cloud_foundation:*:*:*:*:*:*:*:*
Total vulnerabilities: 35
Public exploits: 6
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cloud Foundation version 4.0 Cloud Foundation 4.0 is affected by 35 vulnerabilities: 3 critical, 4 high, 7 medium, 21 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86668 - Permissions, Privileges, and Access Controls
CVE-2024-22235
CWE-264 Low
No
No
- 21.02.2024 SB2024022102
#VU76057 - Permissions, Privileges, and Access Controls
CVE-2023-20880
CWE-264 Low
No
No
- 12.05.2023 SB2023051209
#VU76056 - Permissions, Privileges, and Access Controls
CVE-2023-20879
CWE-264 Low
No
No
- 12.05.2023 SB2023051209
#VU76055 - Deserialization of Untrusted Data
CVE-2023-20878
CWE-502 Low
No
No
- 12.05.2023 SB2023051209
#VU76053 - Permissions, Privileges, and Access Controls
CVE-2023-20877
CWE-264 Medium
No
No
- 12.05.2023 SB2023051209
#VU63407 - Permissions, Privileges, and Access Controls
CVE-2022-22973
CWE-264 Low
No
No
- 18.05.2022 SB2022051838
#VU63406 - Improper Authentication
CVE-2022-22972
CWE-287 High
Public exploit available
No
- 18.05.2022 SB2022051838
#VU61936 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22961
CWE-200 Medium
No
No
- 06.04.2022 SB2022040612
SB2022040613
SB2022040615
and 1 more
#VU61935 - Incorrect Default Permissions
CVE-2022-22960
CWE-276 Low
Public exploit available
Exploited
- 06.04.2022 SB2022040612
SB2022040613
SB2022040614
and 4 more
#VU61934 - Cross-Site Request Forgery (CSRF)
CVE-2022-22959
CWE-352 High
No
No
- 06.04.2022 SB2022040612
SB2022040613
SB2022040614
and 4 more
#VU61933 - Deserialization of Untrusted Data
CVE-2022-22958
CWE-502 Low
No
No
- 06.04.2022 SB2022040612
SB2022040613
SB2022040614
and 4 more
#VU61932 - Deserialization of Untrusted Data
CVE-2022-22957
CWE-502 Low
Public exploit available
No
- 06.04.2022 SB2022040612
SB2022040613
SB2022040614
and 4 more
#VU61929 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22954
CWE-94 Critical
Public exploit available
Exploited
- 06.04.2022 SB2022040612
SB2022040613
SB2022040615
and 1 more
#VU60191 - Cleartext Storage of Sensitive Information
CVE-2022-22939
CWE-312 Low
No
No
4.3.1.1 31.01.2022 SB2022013117
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Public exploit available
Exploited
- 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU56807 - Permissions, Privileges, and Access Controls
CVE-2021-22018
CWE-264 Medium
No
No
4.3.1 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56800 - Improper Authentication
CVE-2021-22011
CWE-287 Medium
No
No
3.10.2.2, 4.3.1 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU55616 - Unprotected primary channel
CVE-2021-22003
CWE-419 Low
No
No
- 05.08.2021 SB2021080524
SB2021080525
SB2021080526
and 2 more
#VU55615 - Server-Side Request Forgery (SSRF)
CVE-2021-22002
CWE-918 High
No
No
- 05.08.2021 SB2021080524
SB2021080525
SB2021080526
and 3 more
#VU54816 - Out-of-bounds read
CVE-2021-21995
CWE-125 Medium
No
No
3.10.2 13.07.2021 SB2021071366
SB2021071373
SB2021101003
and 2 more


Showing elements 1 - 20 out of 35