Known vulnerabilities in VMware Tanzu Operations Manager 2.7

Vendor: Broadcom
Version: 2.7
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Tanzu Operations Manager version 2.7 VMware Tanzu Operations Manager 2.7 is affected by 7 vulnerabilities: 1 critical, 6 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77450 - Out-of-bounds write
CVE-2023-3138
CWE-787 Medium
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3 15.06.2023 SB2023061549
SB2023061554
SB2023061556
and 45 more
#VU62316 - Improper input validation
CVE-2020-36309
CWE-20 Medium
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3 14.04.2022 SB2021040629
SB2022041422
SB2022042817
and 2 more
#VU59319 - Origin Validation Error
CVE-2021-3618
CWE-346 Medium
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Public exploit available
Exploited
2.10.23 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU47272 - Exposure of sensitive information to an unauthorized actor
CVE-2020-5422
CWE-200 Medium
No
No
2.6.27, 2.7.22, 2.8.12, 2.9.9, 2.10.1 02.10.2020 SB2020100217
SB2020100218
#VU46107 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-11724
CWE-444 Medium
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3 27.08.2020 SB2020041208
SB2020082719
SB2022041422
and 3 more
#VU32994 - Permissions, Privileges, and Access Controls
CVE-2020-5414
CWE-264 Medium
No
No
2.7.15, 2.8.6, 2.9.1 03.08.2020 SB2020080308