Known vulnerabilities in vRealize Suite Lifecycle Manager 8.4.1

Vendor: Broadcom

Software: vRealize Suite Lifecycle Manager

Version: 8.4.1

Software CPE: cpe:2.3:a:broadcom:vrealize_suite_lifecycle_manager:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 21

Public exploits: 6

Known exploited (KEV): 3

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (21)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU65991 - Improper Control of Generation of Code ('Code Injection') CVE-2022-31665	CWE-94	Low	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65990 - Permissions, Privileges, and Access Controls CVE-2022-31664	CWE-264	Low	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31663	CWE-79	Low	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65988 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31662	CWE-22	Medium	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080256 and 4 more
#VU65987 - Permissions, Privileges, and Access Controls CVE-2022-31661	CWE-264	Low	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65986 - Permissions, Privileges, and Access Controls CVE-2022-31660	CWE-264	Low	Public exploit available	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65985 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-31659	CWE-89	Low	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65984 - Improper Control of Generation of Code ('Code Injection') CVE-2022-31658	CWE-94	Low	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65983 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2022-31657	CWE-601	Low	No	No	-	02.08.2022	SB2022080254 SB2022080255 SB2022080257 and 3 more
#VU65957 - Improper Authentication CVE-2022-31656	CWE-287	Critical	No	No	-	02.08.2022	SB2022080229 SB2022081126
#VU63407 - Permissions, Privileges, and Access Controls CVE-2022-22973	CWE-264	Low	No	No	-	18.05.2022	SB2022051838
#VU63406 - Improper Authentication CVE-2022-22972	CWE-287	High	Public exploit available	No	-	18.05.2022	SB2022051838
#VU61936 - Exposure of sensitive information to an unauthorized actor CVE-2022-22961	CWE-200	Medium	No	No	-	06.04.2022	SB2022040612 SB2022040613 SB2022040615 and 1 more
#VU61935 - Incorrect Default Permissions CVE-2022-22960	CWE-276	Low	Public exploit available	Exploited	-	06.04.2022	SB2022040612 SB2022040613 SB2022040614 and 4 more
#VU61934 - Cross-Site Request Forgery (CSRF) CVE-2022-22959	CWE-352	High	No	No	-	06.04.2022	SB2022040612 SB2022040613 SB2022040614 and 4 more
#VU61933 - Deserialization of Untrusted Data CVE-2022-22958	CWE-502	Low	No	No	-	06.04.2022	SB2022040612 SB2022040613 SB2022040614 and 4 more
#VU61932 - Deserialization of Untrusted Data CVE-2022-22957	CWE-502	Low	Public exploit available	No	-	06.04.2022	SB2022040612 SB2022040613 SB2022040614 and 4 more
#VU61929 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22954	CWE-94	Critical	Public exploit available	Exploited	-	06.04.2022	SB2022040612 SB2022040613 SB2022040615 and 1 more
#VU59055 - Improper Authentication CVE-2021-22057	CWE-287	Low	No	No	-	20.12.2021	SB2021122001 SB2021122004
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Public exploit available	Exploited	-	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more

Showing elements 1 - 20 out of 21

Known vulnerabilities in vRealize Suite Lifecycle Manager 8.4.1

Vulnerabilities by Severity

Vulnerabilities (21)

Please verify you're human