Known vulnerabilities in VMware Tanzu Operations Manager - page 8

Vendor: Broadcom
Software CPE: cpe:2.3:a:broadcom:vmware_tanzu_operations_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 426
Public exploits: 15
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Tanzu Operations Manager VMware Tanzu Operations Manager is affected by 426 known vulnerabilities: 4 critical, 109 high, 164 medium, 149 low Critical High Medium Low

Vulnerabilities (426)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565
CWE-611 Medium
Available
No
2.10.62 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU80421 - Out-of-bounds read
CVE-2022-48554
CWE-125 Low
No
No
3.0.16 05.09.2023 SB2023090535
SB2023090536
SB2023091257
and 52 more
#VU80391 - Out-of-bounds write
CVE-2022-48174
CWE-787 Medium
No
No
2.10.61 04.09.2023 SB2023090428
SB2023090430
SB2023090537
and 16 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417
CWE-89 Medium
No
No
2.10.9 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969
CWE-264 Low
No
No
2.10.62 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU77450 - Out-of-bounds write
CVE-2023-3138
CWE-787 Medium
No
No
2.7.25, 2.8.16, 2.9.12, 2.10.3 15.06.2023 SB2023061549
SB2023061554
SB2023061556
and 45 more
#VU77081 - Integer overflow
CVE-2023-33204
CWE-190 Medium
No
No
2.10.59, 3.0.12 08.06.2023 SB2023060803
SB2023060810
SB2023080278
and 11 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602
CWE-401 Medium
No
No
3.0.12 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76672 - Integer overflow
CVE-2023-2610
CWE-190 High
No
No
2.10.59, 3.0.12 30.05.2023 SB2023053072
SB2023060908
SB2023061307
and 19 more
#VU76671 - NULL Pointer Dereference
CVE-2023-2609
CWE-476 Low
No
No
2.10.59, 3.0.12 30.05.2023 SB2023053071
SB2023060908
SB2023061307
and 15 more
#VU76670 - Use of Out-of-range Pointer Offset
CVE-2023-2426
CWE-823 Low
No
No
2.10.59, 3.0.12 30.05.2023 SB2023053070
SB2023060908
SB2023061307
and 14 more
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
2.10.59, 3.0.11 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU75604 - Improper Certificate Validation
CVE-2023-31484
CWE-295 Medium
No
No
2.10.59 01.05.2023 SB2023050116
SB2023052927
SB2023060526
and 39 more
#VU75388 - Out-of-bounds read
CVE-2023-1255
CWE-125 Low
No
No
3.0.11 20.04.2023 SB2023042039
SB2023053044
SB2023061445
and 25 more
#VU75362 - Improper input validation
CVE-2023-25180
CWE-20 Medium
No
No
3.0.12 19.04.2023 SB2023041955
SB2023042001
SB2023042727
and 10 more
#VU75361 - Improper input validation
CVE-2023-24593
CWE-20 Medium
No
No
3.0.12 19.04.2023 SB2023041955
SB2023042001
SB2023042727
and 13 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603
CWE-98 High
No
No
2.10.59, 3.0.12 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
2.10.57, 2.10.59, 3.0.6, 3.0.12 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU69196 - Memory corruption
CVE-2022-39377
CWE-119 Medium
No
No
2.10.59, 3.0.12 10.11.2022 SB2022111005
SB2022111008
SB2022112206
and 20 more
#VU51741 - Improper Handling of Exceptional Conditions
CVE-2021-28831
CWE-755 Medium
No
No
2.9.39, 2.10.40, 2.10.61 26.03.2021 SB2021032622
SB2021032626
SB2021032627
and 25 more


Showing elements 141 - 160 out of 426