Known vulnerabilities in VMware Tanzu velero
Vendor:
Broadcom
Software:
VMware Tanzu velero
Software CPE:
cpe:2.3:a:broadcom:vmware_tanzu_velero:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1.18.4
1.18.4.1
1.18.3
1.18.3.2
1.18.3.1
1.18.2
1.18.2.2
1.18.2.1
1.18.1
1.18.1.2
1.18.1.1
1.18.0
1.18.0.2
1.18.0.1
1.17.2
1.17.2.2
1.17.2.1
1.17.1
1.17.1.1
1.17.0
1.17.0.2
1.17.0.1
1.16.2
1.16.2.1
1.16.1
1.16.1.1
1.16.0
1.16.0.2
1.16.0.1
1.15.2
1.15.2.1
1.15.1
1.15.1.1
1.15.0
1.15.0.2
1.15.0.1
1.14.1.1
1.14.1
1.14.0.3
1.14.0.2
1.14.0.1
1.14.0
1.13.2.1
1.13.2
1.13.1.1
1.13.1
1.13.0.2
1.13.0.1
1.13.0
1.12.4.1
1.12.4
1.12.3.1
1.12.3
1.12.2.2
1.12.2.1
1.12.2
1.12.1.1
1.12.1
1.12.0.2
1.12.0.1
1.12.0
1.11.1.1
1.11.1
1.11.0.2
1.11.0.1
1.11.0
1.10.3.1
1.10.3
1.10.2.2
1.10.2.1
1.10.2
1.10.1.3
1.10.1.2
1.10.1.1
1.10.1
1.10.0.2
1.10.0.1
1.10.0
1.9.7.1
1.9.7
1.9.6.1
1.9.6
1.9.5.2
1.9.5.1
1.9.5
1.9.4.2
1.9.4.1
1.9.4
1.9.3.3
1.9.3.2
1.9.3.1
1.9.3
1.9.2.1
1.9.2
1.9.1.3
1.9.1.2
1.9.1.1
1.9.1
1.9.0.2
1.9.0.1
1.9.0
1.8.1.2
1.8.1.1
1.8.1
1.8.0.2
1.8.0.1
1.8.0
1.7.2.1
1.7.2
1.7.1.1
1.7.1
1.7.0.2
1.7.0.1
1.7.0
1.6.3
1.6.2
1.6.1
1.6.0.2
1.6.0.1
1.6.0
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0beta.1
1.5.0.1
1.4.3
1.4.2
1.4.1
1.4.0beta.1
1.4.0
1.3.3.7
1.3.2
1.3.1
1.3.0beta.2
1.3.0beta.1
1.3.0
1.2.7
1.2.6
1.2.5
1.2.0beta.1
1.2.0
1.1.0beta.2
1.1.0beta.1
1.1.0
1.0.2
1.0.1
1.0.0beta.1
1.0.0alpha.2
1.0.0alpha.1
1.0.0.1
1.0.0
0.11.1beta.1
0.11.1
0.11.0
0.10.2
0.10.1
0.10.0beta.1
0.10.0
0.9.11
0.9.10
0.9.9
0.9.8beta.1
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0alpha.3
0.9.0alpha.2
0.9.0alpha.1
0.9.0
0.8.3
0.8.2
0.8.1
0.8.0.1
0.8.0
0.7.1
0.7.0
0.6.0
0.5.1
0.5.0
0.4.0
0.3.3
0.3.2
0.3.1
0.3.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU153052 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') |
CWE-362 | Medium | 1.18.3 | 01.10.2026 |
SB2026100123 |
||
| #VU153048 - Unintended Proxy or Intermediary ('Confused Deputy') |
CWE-441 | Low | 1.18.3 | 01.10.2026 |
SB2026100123 |
||
| #VU144569 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-32637 |
CWE-22 | Low | 1.18.1 | 21.08.2026 |
SB2026082168 |
||
| #VU98765 - Exposure of sensitive information to an unauthorized actor CVE-2020-3996 |
CWE-200 | Low | 1.4.3, 1.5.2 | 17.10.2024 |
SB2020110653 |