Known vulnerabilities in VMware Tanzu Application Service for VMs 2.6.15

Vendor: Broadcom
Version: 2.6.15
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tanzu Application Service for VMs version 2.6.15 VMware Tanzu Application Service for VMs 2.6.15 is affected by 3 vulnerabilities: 2 critical, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Public exploit available
Exploited
2.10.29, 2.11.17, 2.12.10, 2.13.1 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Public exploit available
Exploited
2.7.42, 2.10.22, 2.11.10, 2.12.3 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU46181 - Incorrect Permission Assignment for Critical Resource
CVE-2020-5417
CWE-732 Medium
No
No
2.7.28, 2.8.22, 2.9.16, 2.10.8 01.09.2020 SB2020090120
SB2020111701