Known vulnerabilities in VMware Tanzu Application Service for VMs 2.9.28

Vendor: Broadcom
Version: 2.9.28
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tanzu Application Service for VMs version 2.9.28 VMware Tanzu Application Service for VMs 2.9.28 is affected by 2 vulnerabilities: 2 critical Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965
CWE-94 Critical
Public exploit available
Exploited
2.10.29, 2.11.17, 2.12.10, 2.13.1 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Public exploit available
Exploited
2.7.42, 2.10.22, 2.11.10, 2.12.3 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more