Known vulnerabilities in VMware Tanzu Operations Manager

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 426
Public exploits: 15
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Operations Manager VMware Tanzu Operations Manager is affected by 426 known vulnerabilities: 4 critical, 109 high, 164 medium, 149 low Critical High Medium Low

Vulnerabilities (426)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83863 - Resource exhaustion
CVE-2022-48063
CWE-400 Low
No
No
2.10.65 05.12.2023 SB2023052341
SB2023120507
SB2023120511
and 9 more
#VU83862 - Missing release of memory after effective lifetime
CVE-2022-47011
CWE-401 Low
No
No
2.10.65 05.12.2023 SB2023120506
SB2023120507
SB2023120511
and 4 more
#VU83861 - Missing release of memory after effective lifetime
CVE-2022-47010
CWE-401 Low
No
No
2.10.65 05.12.2023 SB2023120506
SB2023120507
SB2023120511
and 3 more
#VU83860 - Missing release of memory after effective lifetime
CVE-2022-47008
CWE-401 Low
No
No
2.10.65 05.12.2023 SB2023120506
SB2023120507
SB2023120511
and 4 more
#VU83859 - Missing release of memory after effective lifetime
CVE-2022-47007
CWE-401 Low
No
No
2.10.65 05.12.2023 SB2023120506
SB2023120507
SB2023120511
and 3 more
#VU83858 - Reachable Assertion
CVE-2022-35205
CWE-617 Low
No
No
2.10.65 05.12.2023 SB2023120506
SB2023120507
SB2023120511
and 8 more
#VU82351 - Sequence of Processor Instructions Leads to Unexpected Behavior
CVE-2023-23583
CWE-1281 Low
No
No
2.10.66, 3.0.20 24.10.2023 SB2023102457
SB2023111435
SB2023111436
and 34 more
#VU82159 - Improper input validation
CVE-2023-22032
CWE-20 Medium
No
No
3.0.19 17.10.2023 SB20231017100
SB2023110151
SB2023120428
and 10 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
2.10.63 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81436 - Out-of-bounds read
CVE-2023-43789
CWE-125 Low
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.39 03.10.2023 SB2023100342
SB2023100346
SB2023100424
and 36 more
#VU81435 - Out-of-bounds read
CVE-2023-43788
CWE-125 Low
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.39 03.10.2023 SB2023100342
SB2023100346
SB2023100424
and 37 more
#VU81434 - Integer overflow
CVE-2023-43787
CWE-190 Low
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3, 2.10.39 03.10.2023 SB2023100341
SB2023100346
SB2023100347
and 42 more
#VU81433 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-43786
CWE-835 Low
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3, 2.10.39 03.10.2023 SB2023100341
SB2023100346
SB2023100347
and 43 more
#VU81432 - Out-of-bounds read
CVE-2023-43785
CWE-125 Low
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3 03.10.2023 SB2023100341
SB2023100347
SB2023100423
and 37 more
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217
CWE-122 Critical
Available
Exploited
2.7.25, 2.8.16, 2.9.12, 2.10.3 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054
CWE-824 Medium
No
No
2.10.66 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU16828 - Heap-based Buffer Overflow
CVE-2018-20671
CWE-190 Low
No
No
2.10.65 07.01.2019 SB2018123105
SB2023120507
SB2023120511
and 1 more
#VU10366 - Integer overflow
CVE-2018-6543
CWE-190 Low
No
No
2.10.65 05.02.2018 SB2018020504
SB2019081104
SB2018112746
and 2 more
#VU37859 - Heap-based Buffer Overflow
CVE-2017-17122
CWE-122 Medium
No
No
2.10.65 04.12.2017 SB2017111521
SB2018112746
SB2022032315
and 2 more
#VU39082 - Improper input validation
CVE-2017-8421
CWE-20 Medium
No
No
2.10.65 02.05.2017 SB2017031704
SB2017091709
SB2023120507
and 1 more


Showing elements 1 - 20 out of 426