Known vulnerabilities in VMware Tanzu Operations Manager 2.10.54

Vendor: Broadcom
Version: 2.10.54
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tanzu Operations Manager version 2.10.54 VMware Tanzu Operations Manager 2.10.54 is affected by 7 vulnerabilities: 1 high, 5 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-32001
CWE-367 Low
No
No
2.10.61 21.07.2023 SB2023072135
SB2023072137
SB2023072138
and 17 more
#VU78454 - Untrusted Search Path
CVE-2023-38408
CWE-426 Medium
Public exploit available
No
2.10.61 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU77612 - Resource exhaustion
CVE-2023-2828
CWE-400 Medium
No
No
2.10.60, 3.0.12 21.06.2023 SB2023062155
SB2023062201
SB2023062601
and 66 more
#VU77610 - Resource Management Errors
CVE-2023-2911
CWE-399 Medium
No
No
2.10.60, 3.0.12 21.06.2023 SB2023062155
SB2023062201
SB2023062205
and 15 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
2.10.61 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
2.10.61 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603
CWE-98 High
No
No
2.10.59, 3.0.12 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more