Known vulnerabilities in VMware Tanzu Application Service for VMs - page 21

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Total vulnerabilities: 483
Public exploits: 18
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Application Service for VMs VMware Tanzu Application Service for VMs is affected by 483 known vulnerabilities: 5 critical, 112 high, 201 medium, 165 low Critical High Medium Low

Vulnerabilities (483)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71236 - Untrusted Search Path
CVE-2022-4883
CWE-426 Low
No
No
2.11.35, 2.12.24, 2.13.17, 3.0.7 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 38 more
#VU71235 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-44617
CWE-835 Low
No
No
2.11.35, 2.12.24, 2.13.17, 3.0.7 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 34 more
#VU71234 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-46285
CWE-835 Low
Available
No
2.11.35, 2.12.24, 2.13.17, 3.0.7 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 35 more
#VU69506 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-33621
CWE-113 Medium
No
No
2.11.35, 2.12.24, 2.13.17, 3.0.7 22.11.2022 SB2022112239
SB2022112439
SB2023011730
and 31 more
#VU68829 - Resource Management Errors
CVE-2022-40304
CWE-399 Medium
No
No
2.11.31, 2.12.20, 2.13.13, 3.0.7 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
2.11.31, 2.12.20, 2.13.13, 3.0.7 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU66813 - NULL Pointer Dereference
CVE-2022-2309
CWE-476 Medium
No
No
2.11.31, 2.12.20, 2.13.13, 3.0.7 29.08.2022 SB2022082928
SB2022082929
SB2022082930
and 28 more
#VU65855 - Improper input validation
CVE-2022-33070
CWE-20 Medium
No
No
2.11.35, 2.12.24, 2.13.17, 3.0.7 28.07.2022 SB2022072825
SB2022072828
SB20230118105
and 8 more
#VU64464 - Missing release of memory after effective lifetime
CVE-2016-5011
CWE-401 Low
No
No
- 17.06.2022 SB2022061729
SB2022080146
#VU60783 - Heap-based Buffer Overflow
CVE-2022-0392
CWE-122 High
No
No
2.11.33, 2.12.22, 2.13.15, 3.0.7 22.02.2022 SB2022022221
SB2022031527
SB2022032446
and 27 more
#VU60779 - Heap-based Buffer Overflow
CVE-2022-0417
CWE-122 Low
No
No
2.11.33, 2.12.22, 2.13.15, 3.0.7 22.02.2022 SB2022022221
SB2022040828
SB2022082104
and 10 more
#VU12201 - Improper input validation
CVE-2017-13734
CWE-20 Low
No
No
- 26.04.2018 SB2018041708
SB2017100328
SB2022052624
and 1 more
#VU12200 - Improper input validation
CVE-2017-13733
CWE-20 Low
No
No
- 26.04.2018 SB2018041708
SB2017120121
SB2017100327
and 4 more
#VU12199 - Improper input validation
CVE-2017-13732
CWE-20 Low
No
No
- 26.04.2018 SB2018041708
SB2017120121
SB2017100326
and 2 more
#VU12198 - Improper input validation
CVE-2017-13731
CWE-20 Low
No
No
- 26.04.2018 SB2018041708
SB2017120121
SB2017100325
and 2 more
#VU12197 - Improper input validation
CVE-2017-13730
CWE-20 Low
No
No
- 26.04.2018 SB2018041708
SB2017120121
SB2017100324
and 2 more
#VU12196 - Improper input validation
CVE-2017-13729
CWE-20 Low
No
No
- 26.04.2018 SB2018041708
SB2017120121
SB2017100323
and 2 more
#VU12191 - Improper input validation
CVE-2017-11112
CWE-20 Low
No
No
- 26.04.2018 SB2018041708
SB2017100320
SB2022052624
and 1 more
#VU12190 - Use of Externally-Controlled Format String
CVE-2017-10685
CWE-134 High
No
No
- 26.04.2018 SB2017071502
SB2017070709
SB2017070623
and 5 more
#VU12110 - Stack-based buffer overflow
CVE-2017-10684
CWE-121 High
No
No
- 20.04.2018 SB2017070103
SB2017071502
SB2017070709
and 6 more


Showing elements 401 - 420 out of 483