Known vulnerabilities in VMware Tanzu Application Service for VMs - page 12

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Total vulnerabilities: 483
Public exploits: 18
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Application Service for VMs VMware Tanzu Application Service for VMs is affected by 483 known vulnerabilities: 5 critical, 112 high, 201 medium, 165 low Critical High Medium Low

Vulnerabilities (483)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75741 - Improper input validation
CVE-2023-1667
CWE-20 Medium
No
No
- 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 75 more
#VU75740 - Improper Authentication
CVE-2023-2283
CWE-287 High
No
No
- 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU75486 - Improper input validation
CVE-2023-29007
CWE-20 Low
Available
No
2.11.39, 2.13.21, 3.0.11, 4.0.2 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
2.11.39, 2.13.21, 3.0.11, 4.0.2 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652
CWE-59 Low
No
No
2.11.39, 2.13.21, 3.0.11, 4.0.2 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487
CWE-78 Low
No
No
- 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486
CWE-78 Low
No
No
- 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU64709 - Heap-based Buffer Overflow
CVE-2022-2207
CWE-122 Medium
No
No
- 27.06.2022 SB2022062719
SB2022071351
SB2022080610
and 17 more
#VU63627 - Memory corruption
CVE-2021-36690
CWE-119 Low
No
No
2.7.50, 2.10.32, 2.11.20, 2.12.13, 2.13.5 25.05.2022 SB2022050533
SB2022071831
SB2022092034
and 16 more
#VU63007 - Improper input validation
CVE-2022-27780
CWE-20 Low
No
No
2.7.50, 2.10.32, 2.11.20, 2.12.13, 2.13.5 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 14 more
#VU62851 - Memory corruption
CVE-2022-28463
CWE-119 High
No
No
2.7.52, 2.10.34, 2.11.22, 2.12.15, 2.13.7 09.05.2022 SB2022050924
SB2022060125
SB2022060203
and 9 more
#VU62768 - Uncontrolled Memory Allocation
CVE-2022-1473
CWE-789 Low
No
No
2.7.50, 2.10.32, 2.11.20, 2.12.13, 2.13.5 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 18 more
#VU62767 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-1434
CWE-300 Low
No
No
2.7.50, 2.10.32, 2.11.20, 2.12.13, 2.13.5 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 10 more
#VU62766 - Security Features
CVE-2022-1343
CWE-254 Medium
No
No
2.7.50, 2.10.32, 2.11.20, 2.12.13, 2.13.5 03.05.2022 SB2022050315
SB2022050436
SB2022050532
and 14 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
2.7.50, 2.10.32, 2.11.20, 2.12.13, 2.13.5 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU62025 - Memory corruption
CVE-2022-0729
CWE-119 High
No
No
- 08.04.2022 SB2022040826
SB2022040828
SB2022060635
and 9 more
#VU60796 - Heap-based Buffer Overflow
CVE-2022-0714
CWE-122 High
No
No
- 22.02.2022 SB2022022221
SB2022040828
SB2022060635
and 9 more
#VU60776 - Heap-based Buffer Overflow
CVE-2022-0572
CWE-122 High
No
No
- 22.02.2022 SB2022022221
SB2022040828
SB2022060635
and 10 more
#VU60775 - Stack-based buffer overflow
CVE-2022-0629
CWE-121 High
No
No
- 22.02.2022 SB2022022221
SB2022040828
SB2022082104
and 8 more
#VU60774 - Use of Out-of-range Pointer Offset
CVE-2022-0685
CWE-823 Low
No
No
- 22.02.2022 SB2022022221
SB2022040828
SB2022060635
and 8 more


Showing elements 221 - 240 out of 483