Known vulnerabilities in VMware Tanzu Operations Manager 2.9.1
Vendor:
Broadcom
Software:
VMware Tanzu Operations Manager
Version:
2.9.1
Software CPE:
cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
23
Public exploits:
5
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
3.0.41
3.0.40
3.0.39
3.0.38
3.0.37
3.0.36
3.0.35
3.0.34
3.0.33
3.0.32
3.0.31
3.0.30
3.0.29
3.0.28
3.0.27
3.0.26
3.0.25
3.0.24
3.0.23
3.0.22
3.0.21
2.10.63
2.10.65
2.10.66
3.0.20
3.0.19
3.0.18
3.0.17
2.10.62
2.10.61
3.0.16
3.0.15
2.10.60
3.0.14
3.0.13
2.10.59
2.10.58
3.0.12
3.0.11
2.10.54
2.10.53
2.10.55
2.10.57
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.10.52
2.10.51
2.10.50
2.10.49
2.10.48
2.10.47
2.9.43
2.10.46
2.9.42
2.10.45
2.9.41
2.10.44
2.10.43
2.10.42
2.10.41
2.9.40
2.10.40
2.9.39
2.10.39
2.9.38
2.10.38
2.9.37
2.10.37
2.9.36
2.8.21
1.8.29
1.8.28
1.8.27
1.8.26
1.8.25
1.8.24
1.8.23
1.8.22
1.8.21
1.8.20
1.8.19
1.8.18
1.8.17
1.8.16
1.8.15
1.8.14
1.8.13
1.8.12
1.8.11
1.8.10
1.8.9
1.8.8
1.8.7
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.9.27
1.9.26
1.9.25
1.9.24
1.9.23
1.9.22
1.9.21
1.9.20
1.9.19
1.9.18
1.9.17
1.9.16
1.9.15
1.9.14
1.9.13
1.9.12
1.9.11
1.9.10
1.9.9
1.9.8
1.9.7
1.9.6
1.9.5
1.9.4
1.9.3
1.9.2
1.9.1
1.9.0
1.10.27
1.10.26
1.10.25
1.10.24
1.10.23
1.10.22
1.10.21
1.10.20
1.10.19
1.10.18
1.10.17
1.10.16
1.10.15
1.10.14
1.10.13
1.10.12
1.10.11
1.10.10
1.10.9
1.10.8
1.10.7
1.10.6
1.10.5
1.10.4
1.10.3
1.10.2
1.10.1
1.10.0
1.11.29
1.11.28
1.11.27
1.11.26
1.11.25
1.11.24
1.11.23
1.11.22
1.11.21
1.11.20
1.11.19
1.11.18
1.11.17
1.11.16
1.11.15
1.11.14
1.11.13
1.11.12
1.11.11
1.11.10
1.11.9
1.11.8
1.11.7
1.11.6
1.11.5
1.11.4
1.11.3
1.11.2
1.11.1
1.11.0
1.12.25
1.12.24
1.12.23
1.12.22
1.12.21
1.12.20
1.12.19
1.12.18
1.12.17
1.12.16
1.12.15
1.12.13
1.12.12
1.12.11
1.12.10
1.12.9
1.12.8
1.12.7
1.12.6
1.12.5
1.12.4
1.12.3
1.12.2
1.12.1
1.12.0
2.0.29
2.0.28
2.0.27
2.0.26
2.0.25
2.0.24
2.0.23
2.0.22
2.0.21
2.0.20
2.0.19
2.0.18
2.0.17
2.0.16
2.0.15
2.0.14
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
2.1.20
2.1.19
2.1.18
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.11
2.1.10
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.2.25
2.2.24
2.2.23
2.2.22
2.2.21
2.2.20
2.2.19
2.2.18
2.2.17
2.2.16
2.2.15
2.2.14
2.2.13
2.2.12
2.2.11
2.2.10
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.3.26
2.3.25
2.3.24
2.3.23
2.3.22
2.3.21
2.3.20
2.3.19
2.3.18
2.3.17
2.3.16
2.3.15
2.3.14
2.3.13
2.3.12
2.3.11
2.3.10
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.4.26
2.4.25
2.4.24
2.4.23
2.4.22
2.4.21
2.4.20
2.4.19
2.4.18
2.4.17
2.4.16
2.4.15
2.4.14
2.4.13
2.4.12
2.4.11
2.4.10
2.4.9
2.4.8
2.4.7
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.5.30
2.5.29
2.5.28
2.5.27
2.5.26
2.5.25
2.5.24
2.5.23
2.5.22
2.5.21
2.5.20
2.5.19
2.5.17
2.5.16
2.5.15
2.5.14
2.5.13
2.5.12
2.5.11
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.6.26
2.6.25
2.6.24
2.6.23
2.6.22
2.6.21
2.6.20
2.6.19
2.6.18
2.6.17
2.6.16
2.6.15
2.6.14
2.6.13
2.6.12
2.6.11
2.6.10
2.6.9
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.7.30
2.7.27
2.7.26
2.7.24
2.7.21
2.7.20
2.7.19
2.7.18
2.7.17
2.7.16
2.7.14
2.7.13
2.7.12
2.7.11
2.7.10
2.7.9
2.7.8
2.7.7
2.7.6
2.7.5
2.7.4
2.7.3
2.7.2
2.7.1
2.10.36
2.10.35
2.10.34
2.10.33
2.10.32
2.10.31
2.10.30
2.10.29
2.10.28
2.10.27
2.10.26
2.10.25
2.10.24
2.9.35
2.9.34
2.9.33
2.9.32
2.9.31
2.9.30
2.9.29
2.9.28
2.9.27
2.9.26
2.9.25
2.9.24
2.9.23
2.9.22
2.9.21
2.9.20
2.9.19
2.9.18
2.9.15
2.9.14
2.9.11
2.9.8
2.9.7
2.9.6
2.9.5
2.9.4
2.9.3
2.9.2
2.8.20
2.8.19
2.8.18
2.8.17
2.8.16
2.8.15
2.8.14
2.8.11
2.8.10
2.8.9
2.8.8
2.8.7
2.8.5
2.8.3
2.8.2
2.8.1
2.10.23
2.10.22
2.10.21
2.10.20
2.10.19
2.10.18
2.10.17
2.10.16
2.10.15
2.10.14
2.10.13
2.10.12
2.10.11
2.10.10
2.10.9
2.10.8
2.10.7
2.10.4
2.10.2
2.10.5
2.9.16
2.7.28
2.10.6
2.9.17
2.7.29
2.9.13
2.10.3
2.9.12
2.7.25
2.10
2.9.9
2.8.12
2.7.22
-
2.10.1
2.9.10
2.8.13
2.7.23
2.6.27
2.9
2.8
2.7
2.9.1
2.8.6
2.7.15
Vulnerabilities (23)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77450 - Out-of-bounds write CVE-2023-3138 |
CWE-787 | Medium | 2.7.25, 2.8.16, 2.9.12, 2.10.3 | 15.06.2023 |
SB2023061549 SB2023061554 SB2023061556 and 45 more |
||
| #VU64274 - Out-of-bounds read CVE-2022-29458 |
CWE-125 | Medium | 2.9.41, 2.10.44, 2.10.59, 3.0.11 | 14.06.2022 |
SB2022061418 SB2022061419 SB2022072842 and 29 more |
||
| #VU62316 - Improper input validation CVE-2020-36309 |
CWE-20 | Medium | 2.7.25, 2.8.16, 2.9.12, 2.10.3 | 14.04.2022 |
SB2021040629 SB2022041422 SB2022042817 and 2 more |
||
| #VU62002 - Improper input validation CVE-2022-1271 |
CWE-20 | High | 2.9.38, 2.10.39 | 08.04.2022 |
SB2022040803 SB2022040804 SB2022040822 and 134 more |
||
| #VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965 |
CWE-94 | Critical | 2.8.20, 2.9.35, 2.10.35 | 31.03.2022 |
SB2022033109 SB2022040109 SB2022040110 and 78 more |
||
| #VU61671 - Memory corruption CVE-2018-25032 |
CWE-119 | Medium | 2.9.41, 2.10.44 | 28.03.2022 |
SB2022032844 SB2022032845 SB2022033018 and 192 more |
||
| #VU59319 - Origin Validation Error CVE-2021-3618 |
CWE-346 | Medium | 2.7.25, 2.8.16, 2.9.12, 2.10.3 | 09.01.2022 |
SB2022010903 SB2022010904 SB2022010905 and 37 more |
||
| #VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228 |
CWE-94 | Critical | 2.10.23 | 10.12.2021 |
SB2021121003 SB2021121101 SB2021121201 and 338 more |
||
| #VU57577 - Out-of-bounds write CVE-2021-39537 |
CWE-787 | High | 2.9.41, 2.10.44, 2.10.59, 3.0.11 | 21.10.2021 |
SB2021102119 SB2022061419 SB2021102025 and 18 more |
||
| #VU51741 - Improper Handling of Exceptional Conditions CVE-2021-28831 |
CWE-755 | Medium | 2.9.39, 2.10.40, 2.10.61 | 26.03.2021 |
SB2021032622 SB2021032626 SB2021032627 and 25 more |
||
| #VU47741 - Heap-based Buffer Overflow CVE-2020-15999 |
CWE-122 | Critical | 2.7.25, 2.9.13, 2.10.3 | 20.10.2020 |
SB2020102038 SB2020102039 SB2020102040 and 43 more |
||
| #VU46107 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-11724 |
CWE-444 | Medium | 2.7.25, 2.8.16, 2.9.12, 2.10.3 | 27.08.2020 |
SB2020041208 SB2020082719 SB2022041422 and 3 more |
||
| #VU30281 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-20807 |
CWE-78 | Low | 2.7.25, 2.9.12, 2.10.3 | 28.05.2020 |
SB2020052815 SB2020061148 SB2020110918 and 9 more |
||
| #VU21793 - Buffer over-read CVE-2019-17595 |
CWE-126 | Medium | 2.9.41, 2.10.44, 2.10.59, 3.0.11 | 15.10.2019 |
SB2019101515 SB2019112401 SB2019112402 and 23 more |
||
| #VU21792 - Heap-based Buffer Overflow CVE-2019-17594 |
CWE-122 | High | 2.9.41, 2.10.44, 2.10.59, 3.0.11 | 15.10.2019 |
SB2019101515 SB2019112401 SB2019112402 and 23 more |
||
| #VU19572 - Improper input validation CVE-2019-1010204 |
CWE-20 | Low | 2.9.38, 2.10.39 | 31.07.2019 |
SB2019022402 SB2020042840 SB2022032836 and 7 more |
||
| #VU18290 - Improper input validation CVE-2018-1000654 |
CWE-20 | Low | 2.9.38, 2.10.39 | 17.04.2019 |
SB2018082017 SB2019060302 SB2019060502 and 6 more |
||
| #VU15935 - NULL Pointer Dereference CVE-2018-19211 |
CWE-476 | Low | 2.9.41, 2.10.44 | 17.11.2018 |
SB2018111702 SB2018121002 SB2018121009 and 2 more |
||
| #VU12202 - Stack-based buffer overflow CVE-2017-16879 |
CWE-121 | High | 2.9.41, 2.10.44 | 26.04.2018 |
SB2018041708 SB2017120121 SB2018012328 and 2 more |
||
| #VU31389 - Exposure of sensitive information to an unauthorized actor CVE-2017-17087 |
CWE-200 | Low | 2.7.25, 2.9.12, 2.10.3 | 01.12.2017 |
SB2017120122 SB2020112312 SB2021111514 and 10 more |
Showing elements 1 - 20 out of 23