Vmware Tanzu vulnerabilities

Products

• Rabbitmq 6
• Operations Manager 2
• Gemfire 2
• Gemfire For Vms 2

Newest

• vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 more Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression CVE-2022-22963 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalApril 1, 2022
• vmware rabbitmq, debian linux +1 more RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to... CVE-2021-22116 Fix available 7.5 HighJune 8, 2021
• vmware tanzu rabbitmq, broadcom rabbitmq server +1 more RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions... CVE-2021-22117 Fix available 7.8 HighMay 18, 2021
• vmware pivotal scheduler Scheduler for TAS can transmit privileged UAA token in plaintext CVE-2020-5426 8.6 HighNovember 11, 2020
• vmware tanzu single sign-on for vmware tanzu, vmware single sign-on for tanzu +1 more User Impersonation possible in Tanzu SSO CVE-2020-5425 7.5 HighOctober 31, 2020
• pivotal software rabbitmq, broadcom rabbitmq server +1 more RabbitMQ arbitrary code execution using local binary planting CVE-2020-5419 Fix available 6.7 MediumAugust 31, 2020
• pivotal software concourse Concourse's GitLab auth allows impersonation CVE-2020-5415 Fix available 10.0 CriticalAugust 12, 2020
• vmware operations manager, tanzu application service for vms, vmware tanzu application service for vms +2 more +4 more App Autoscaler logs credentials CVE-2020-5414 5.7 MediumJuly 31, 2020
• vmware gemfire, vmware tanzu gemfire for vms, vmware tanzu gemfire for virtual machines +2 more JMX Insecure Default Configuration in GemFire CVE-2020-5396 8.8 HighJuly 31, 2020
• vmware gemfire, vmware tanzu gemfire for vms, vmware tanzu gemfire for virtual machines +2 more JMX Credential Deserialization in GemFire CVE-2019-11286 9.0 CriticalJuly 31, 2020
• spring cloud config, vmware spring cloud config, vmware tanzu spring cloud configuration (config) server +2 more Directory Traversal with spring-cloud-config-server CVE-2020-5410 In KEVPublic exploitFix available EPSS 95.6% 7.5 HighJune 2, 2020
• pivotal rabbitmq, rabbitmq for pivotal platform, broadcom rabbitmq server +3 more +5 more RabbitMQ Web Management Plugin DoS via heap overflow CVE-2019-11287 Public exploitFix available 4.5 MediumNovember 22, 2019
• pivotal rabbitmq, broadcom rabbitmq server, pivotal rabbitmq for pivotal platform +1 more +3 more RabbitMQ XSS attack via federation and shovel endpoints CVE-2019-11291 Fix available 3.1 LowNovember 22, 2019
• pivotal rabbitmq, rabbitmq for pcf, debian linux +3 more +5 more RabbitMQ XSS attack CVE-2019-11281 Fix available 2.4 LowOctober 16, 2019
• pivotal operations manager Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX... CVE-2018-11046 6.5 MediumJune 25, 2018
• broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 more Spring Data Commons remote code injection vulnerability CVE-2018-1273 In KEVPublic exploitFix available EPSS 97.0% 9.8 CriticalApril 11, 2018