Exploited vulnerabilities
VMware Tanzu
3 VMware Tanzu vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue3
Last 12 months0
In ransomware campaigns1
Last addition25 August 2022
The vulnerabilities3
- 25 August 2022CVE-2022-22963Spring CloudVMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
- 25 March 2022CVE-2020-5410Spring Cloud Configuration (Config) ServerVMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
- 25 March 2022CVE-2018-1273Spring Data CommonsVMware Tanzu Spring Data Commons Property Binder VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, VMware Tanzu included.