[ Vendor · 3 CVEs ]

VMware Tanzu

CVEs affecting VMware Tanzu published in the last 30 days, plus any VMware Tanzu CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2022-22963 1 Apr 2022 CVSS 9.8 VMware Tanzu Spring Cloud Function Remote Code ExecutionIn Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide… ExploitedFix
CVE-2020-5410 2 Jun 2020 CVSS 7.5 VMware Tanzu Spring Cloud Config Directory TraversalSpring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve… Exploited
CVE-2018-1273 11 Apr 2018 CVSS 9.8 VMware Tanzu Spring Data Commons Property BinderSpring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused… ExploitedFix