Known vulnerabilities in VMware Tanzu Operations Manager - page 7

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 426
Public exploits: 15
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Operations Manager VMware Tanzu Operations Manager is affected by 426 known vulnerabilities: 4 critical, 109 high, 164 medium, 149 low Critical High Medium Low

Vulnerabilities (426)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82078 - Use After Free
CVE-2022-48560
CWE-416 Medium
No
No
2.10.50, 2.10.62 17.10.2023 SB2023101708
SB2023101712
SB20231017145
and 29 more
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565
CWE-611 Medium
Available
No
2.10.62 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU80421 - Out-of-bounds read
CVE-2022-48554
CWE-125 Low
No
No
3.0.16 05.09.2023 SB2023090535
SB2023090536
SB2023091257
and 52 more
#VU80391 - Out-of-bounds write
CVE-2022-48174
CWE-787 Medium
No
No
2.10.61 04.09.2023 SB2023090428
SB2023090430
SB2023090537
and 16 more
#VU80176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33294
CWE-835 Low
No
No
2.10.61 31.08.2023 SB2023083102
SB2023083104
SB2023101981
and 3 more
#VU80175 - Out-of-bounds write
CVE-2020-21047
CWE-787 Low
No
No
2.10.61 31.08.2023 SB2023083101
SB2023083104
SB2023101981
and 2 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417
CWE-89 Medium
No
No
2.10.9 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969
CWE-264 Low
No
No
2.10.62 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU78288 - NULL Pointer Dereference
CVE-2023-3316
CWE-476 Medium
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.39 16.07.2023 SB2023071613
SB2023071619
SB2023081007
and 17 more
#VU78287 - Memory corruption
CVE-2023-26966
CWE-119 High
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.39 16.07.2023 SB2023071613
SB2023071619
SB2023081007
and 14 more
#VU78286 - Heap-based Buffer Overflow
CVE-2023-26965
CWE-122 High
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.39 16.07.2023 SB2023071613
SB2023071619
SB2023081007
and 16 more
#VU78285 - Memory corruption
CVE-2023-25433
CWE-119 Medium
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.39 16.07.2023 SB2023071613
SB2023071619
SB2023081007
and 17 more
#VU75604 - Improper Certificate Validation
CVE-2023-31484
CWE-295 Medium
No
No
2.10.59 01.05.2023 SB2023050116
SB2023052927
SB2023060526
and 39 more
#VU75388 - Out-of-bounds read
CVE-2023-1255
CWE-125 Low
No
No
3.0.11 20.04.2023 SB2023042039
SB2023053044
SB2023061445
and 25 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603
CWE-98 High
No
No
2.10.59, 3.0.12 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU17718 - Improper input validation
CVE-2019-7665
CWE-20 Low
No
No
2.10.61 15.02.2019 SB2019013103
SB2019031807
SB2019110615
and 7 more
#VU17326 - Out-of-bounds read
CVE-2019-7149
CWE-125 Low
No
No
2.10.61 31.01.2019 SB2019013103
SB2019031807
SB2019110615
and 6 more
#VU17325 - Improper input validation
CVE-2019-7150
CWE-20 Low
No
No
2.10.61 31.01.2019 SB2019013103
SB2019031807
SB2019110615
and 7 more
#VU15528 - NULL Pointer Dereference
CVE-2018-18520
CWE-476 Low
No
No
2.10.61 25.10.2018 SB2018102510
SB2018123005
SB2019010804
and 7 more
#VU15527 - Divide By Zero
CVE-2018-18521
CWE-369 Low
No
No
2.10.61 25.10.2018 SB2018102510
SB2018123005
SB2019010804
and 7 more


Showing elements 121 - 140 out of 426