Known vulnerabilities in VMware Tanzu Operations Manager - page 17

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 426
Public exploits: 15
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Operations Manager VMware Tanzu Operations Manager is affected by 426 known vulnerabilities: 4 critical, 109 high, 164 medium, 149 low Critical High Medium Low

Vulnerabilities (426)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74863 - NULL Pointer Dereference
CVE-2023-28484
CWE-476 Medium
No
No
2.10.57, 3.0.8 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469
CWE-399 Medium
No
No
2.10.57, 3.0.8 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
2.10.57, 3.0.8 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
2.10.57, 3.0.8 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
2.10.57, 3.0.8 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361
CWE-326 Medium
No
No
3.0.5 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
2.10.53 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
2.10.53 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71332 - Improper input validation
CVE-2023-22809
CWE-20 Low
Available
No
2.10.53, 3.0.4 18.01.2023 SB20230118100
SB20230118104
SB20230118105
and 55 more
#VU70457 - Security Features
CVE-2022-43551
CWE-254 Medium
No
No
3.0.4 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
2.10.55, 3.0.4 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU70142 - Improper Locking
CVE-2022-3996
CWE-667 Low
No
No
2.10.57, 3.0.8 13.12.2022 SB2022121328
SB2022122614
SB2023011834
and 12 more
#VU66786 - NULL Pointer Dereference
CVE-2022-2980
CWE-476 Low
No
No
3.0.8 27.08.2022 SB2022082701
SB2022112963
SB2022122715
and 14 more
#VU66784 - Use After Free
CVE-2022-2946
CWE-416 High
No
No
3.0.8 27.08.2022 SB2022082701
SB2022082702
SB2022090924
and 16 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
2.10.55 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU54337 - Improper input validation
CVE-2016-10228
CWE-20 Low
No
No
2.10.52 23.06.2021 SB2017030207
SB2021062314
SB2021062315
and 21 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
2.10.55 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU50329 - Out-of-bounds read
CVE-2019-25013
CWE-125 Low
No
No
2.10.52 04.01.2021 SB2021020413
SB2021020414
SB2021020710
and 36 more
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618
CWE-835 Medium
No
No
2.10.52 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more
#VU12267 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2017-11671
CWE-338 Low
No
No
2.10.52 27.04.2018 SB2017032501
SB2018041052
SB2022120851
and 2 more


Showing elements 321 - 340 out of 426