Known vulnerabilities in VMware Tanzu Operations Manager - page 16

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 426
Public exploits: 15
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Operations Manager VMware Tanzu Operations Manager is affected by 426 known vulnerabilities: 4 critical, 109 high, 164 medium, 149 low Critical High Medium Low

Vulnerabilities (426)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
2.10.57, 3.0.8 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
2.10.57, 3.0.8 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
2.10.57, 3.0.8 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361
CWE-326 Medium
No
No
3.0.5 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
2.10.53 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
2.10.53 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71558 - Heap-based Buffer Overflow
CVE-2023-0433
CWE-122 High
No
No
2.10.53, 2.10.57, 3.0.6 26.01.2023 SB2023012624
SB2023012627
SB2023013071
and 21 more
#VU70457 - Security Features
CVE-2022-43551
CWE-254 Medium
No
No
3.0.4 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
2.10.55, 3.0.4 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU70142 - Improper Locking
CVE-2022-3996
CWE-667 Low
No
No
2.10.57, 3.0.8 13.12.2022 SB2022121328
SB2022122614
SB2023011834
and 12 more
#VU69913 - Heap-based Buffer Overflow
CVE-2022-38533
CWE-122 Low
No
No
2.10.51, 3.0.2 05.12.2022 SB2022120549
SB2022120601
SB2022120603
and 12 more
#VU69362 - Out-of-bounds read
CVE-2022-41916
CWE-125 Medium
No
No
2.10.52 16.11.2022 SB2022111610
SB2022111621
SB2022112302
and 10 more
#VU63778 - Release of invalid pointer or reference
CVE-2021-3682
CWE-763 Low
No
No
2.10.51, 3.0.2 30.05.2022 SB2022022813
SB2021100524
SB2023041751
and 2 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
2.10.55 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU54337 - Improper input validation
CVE-2016-10228
CWE-20 Low
No
No
2.10.52 23.06.2021 SB2017030207
SB2021062314
SB2021062315
and 21 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
2.10.55 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU50329 - Out-of-bounds read
CVE-2019-25013
CWE-125 Low
No
No
2.10.52 04.01.2021 SB2021020413
SB2021020414
SB2021020710
and 36 more
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618
CWE-835 Medium
No
No
2.10.52 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more
#VU12270 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-12132
CWE-451 Low
No
No
2.10.52 27.04.2018 SB2018022812
SB2018022022
SB2018021521
and 8 more
#VU12267 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2017-11671
CWE-338 Low
No
No
2.10.52 27.04.2018 SB2017032501
SB2018041052
SB2022120851
and 2 more


Showing elements 301 - 320 out of 426