VMware Tanzu

CVEs currently on EVULNABLE's Priority Feed for VMware Tanzu, and this vendor's own CISA KEV history.

In EVULNABLE's ranked feed

Showing all 3 VMware Tanzu CVEs in EVULNABLE's ranked feed.

#1 93 Immediate CVE-2018-1273 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS97.0% · 99.89th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE page NVD ↗CISA KEV ↗

#2 87 Immediate CVE-2022-22963 ExigentKEV since 2022 · listed over a yearCISA KEV VMware Tanzu — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2022-08-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#3 83 Urgent CVE-2020-5410 KEV since 2022 · listed over a yearCISA KEV VMware Tanzu — VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS95.6% · 99.87th pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.956.

Full CVE page NVD ↗CISA KEV ↗