Known vulnerabilities in VMware Tanzu Application Service for VMs 2.9.21

Vendor: Broadcom
Version: 2.9.21
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tanzu Application Service for VMs version 2.9.21 VMware Tanzu Application Service for VMs 2.9.21 is affected by 3 vulnerabilities: 2 critical, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Public exploit available
Exploited
2.10.29, 2.11.17, 2.12.10, 2.13.1 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Public exploit available
Exploited
2.7.42, 2.10.22, 2.11.10, 2.12.3 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU58173 - Resource exhaustion
CVE-2021-22101
CWE-400 Medium
No
No
2.7.40, 2.9.28, 2.10.20, 2.11.8, 2.12.1 16.11.2021 SB2021111602
SB2021111603