Known vulnerabilities in VMware Tanzu Application Service for VMs - page 7

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Total vulnerabilities: 483
Public exploits: 18
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Application Service for VMs VMware Tanzu Application Service for VMs is affected by 483 known vulnerabilities: 5 critical, 112 high, 201 medium, 165 low Critical High Medium Low

Vulnerabilities (483)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154
CWE-200 Medium
No
No
3.0.18, 4.0.10 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81872 - Permissions, Privileges, and Access Controls
CVE-2023-4091
CWE-264 Low
No
No
3.0.18, 4.0.10 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 42 more
#VU81871 - Resource Management Errors
CVE-2023-42669
CWE-399 Medium
No
No
3.0.18, 4.0.10 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 35 more
#VU81867 - Resource Management Errors
CVE-2023-42670
CWE-399 Medium
No
No
3.0.18, 4.0.10 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 16 more
#VU81039 - Missing release of memory after effective lifetime
CVE-2022-48541
CWE-401 Low
No
No
2.11.46, 2.13.28, 3.0.18, 4.0.10 21.09.2023 SB2023092135
SB2023092136
SB2023092604
and 5 more
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565
CWE-611 Medium
Available
No
3.0.18, 4.0.10 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU80421 - Out-of-bounds read
CVE-2022-48554
CWE-125 Low
No
No
- 05.09.2023 SB2023090535
SB2023090536
SB2023091257
and 52 more
#VU80391 - Out-of-bounds write
CVE-2022-48174
CWE-787 Medium
No
No
2.11.46, 2.13.28, 3.0.18, 4.0.10 04.09.2023 SB2023090428
SB2023090430
SB2023090537
and 16 more
#VU80176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33294
CWE-835 Low
No
No
3.0.17, 4.0.9 31.08.2023 SB2023083102
SB2023083104
SB2023101981
and 3 more
#VU80175 - Out-of-bounds write
CVE-2020-21047
CWE-787 Low
No
No
3.0.17, 4.0.9 31.08.2023 SB2023083101
SB2023083104
SB2023101981
and 2 more
#VU78756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38633
CWE-22 Medium
No
No
3.0.15, 4.0.6 28.07.2023 SB2023072832
SB2023072902
SB2023080153
and 13 more
#VU78577 - Out-of-bounds read
CVE-2022-2127
CWE-125 Medium
No
No
3.0.15, 4.0.6 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-34966
CWE-835 Medium
No
No
3.0.15, 4.0.6 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 35 more
#VU78573 - Security Features
CVE-2023-3347
CWE-254 Medium
No
No
3.0.15, 4.0.6 24.07.2023 SB2023072431
SB2023072437
SB2023073157
and 16 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969
CWE-264 Low
No
No
- 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU77803 - Incorrect Regular Expression
CVE-2023-36617
CWE-185 Medium
No
No
2.11.44, 2.13.26, 3.0.16, 4.0.8 29.06.2023 SB2023062931
SB2023071289
SB2023101967
and 13 more
#VU74004 - Incorrect Regular Expression
CVE-2023-28755
CWE-185 Medium
No
No
2.11.39, 2.11.44, 2.13.21, 2.13.26, 3.0.11, 3.0.16, 4.0.2, 4.0.8 24.03.2023 SB2023033146
SB2023042108
SB2023050430
and 41 more
#VU51741 - Improper Handling of Exceptional Conditions
CVE-2021-28831
CWE-755 Medium
No
No
2.11.46, 2.13.28, 3.0.18, 4.0.10 26.03.2021 SB2021032622
SB2021032626
SB2021032627
and 25 more
#VU17718 - Improper input validation
CVE-2019-7665
CWE-20 Low
No
No
3.0.17, 4.0.9 15.02.2019 SB2019013103
SB2019031807
SB2019110615
and 7 more
#VU17325 - Improper input validation
CVE-2019-7150
CWE-20 Low
No
No
3.0.17, 4.0.9 31.01.2019 SB2019013103
SB2019031807
SB2019110615
and 7 more


Showing elements 121 - 140 out of 483