Known vulnerabilities in VMware Tanzu Application Service for VMs - page 3

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Total vulnerabilities: 483
Public exploits: 18
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Application Service for VMs VMware Tanzu Application Service for VMs is affected by 483 known vulnerabilities: 5 critical, 112 high, 201 medium, 165 low Critical High Medium Low

Vulnerabilities (483)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82283 - Out-of-bounds read
CVE-2023-29939
CWE-125 Medium
No
No
3.0.15, 4.0.6 20.10.2023 SB2023102038
SB2023102039
SB2023072762
and 1 more
#VU82282 - Out-of-bounds read
CVE-2023-29934
CWE-125 Medium
No
No
3.0.15, 4.0.6 20.10.2023 SB2023102038
SB2023102039
SB2023072762
and 1 more
#VU82281 - Out-of-bounds read
CVE-2023-29933
CWE-125 Medium
No
No
3.0.15, 4.0.6 20.10.2023 SB2023102038
SB2023102039
SB2023072762
and 1 more
#VU82278 - Memory corruption
CVE-2023-29932
CWE-119 Medium
No
No
3.0.15, 4.0.6 20.10.2023 SB2023102038
SB2023102039
SB2023072762
#VU82079 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-48566
CWE-362 Medium
No
No
3.0.18, 4.0.10 17.10.2023 SB2023101709
SB2023101713
SB2023101714
and 17 more
#VU80930 - Resource exhaustion
CVE-2023-4236
CWE-400 Medium
No
No
- 20.09.2023 SB2023092048
SB2023092050
SB2023092301
and 5 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
2.11.46, 2.13.28, 3.0.17, 3.0.18, 4.0.9, 4.0.10 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-32001
CWE-367 Low
No
No
2.11.46, 2.13.28, 3.0.18, 4.0.10 21.07.2023 SB2023072135
SB2023072137
SB2023072138
and 17 more
#VU78454 - Untrusted Search Path
CVE-2023-38408
CWE-426 Medium
Available
No
2.11.44, 2.13.26, 3.0.16, 4.0.8 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
2.11.46, 2.13.28, 3.0.18, 4.0.10 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
2.11.46, 2.13.28, 3.0.18, 4.0.10 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU70135 - Incorrect Comparison
CVE-2022-4293
CWE-697 Low
No
No
- 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 10 more
#VU70134 - Use After Free
CVE-2022-4292
CWE-416 High
No
No
- 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 14 more
#VU70132 - Heap-based Buffer Overflow
CVE-2022-3520
CWE-122 High
No
No
- 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 11 more
#VU70131 - Use After Free
CVE-2022-3591
CWE-416 High
No
No
- 13.12.2022 SB2022121301
SB2022121302
SB2022121303
and 13 more
#VU68964 - Stack-based buffer overflow
CVE-2022-3324
CWE-121 High
No
No
- 03.11.2022 SB2022110330
SB2022112963
SB2022121302
and 20 more
#VU68962 - Use After Free
CVE-2022-3705
CWE-416 High
No
No
- 03.11.2022 SB2022110328
SB2022110335
SB2022112963
and 22 more
#VU67627 - Use After Free
CVE-2022-3256
CWE-416 High
No
No
- 24.09.2022 SB2022092409
SB2022092410
SB2022121302
and 14 more
#VU67435 - Heap-based Buffer Overflow
CVE-2022-3234
CWE-122 High
No
No
- 18.09.2022 SB2022091802
SB2022091803
SB2022112963
and 18 more
#VU64712 - Heap-based Buffer Overflow
CVE-2022-2182
CWE-122 Medium
No
No
- 27.06.2022 SB2022062719
SB2022080610
SB2022082104
and 16 more


Showing elements 41 - 60 out of 483