VMware Tanzu 3

Organization

CVE-2022-22963: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Aug 25, 2022

When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Vulnerabilities & Patching

CVE-2018-1273: VMware Tanzu Spring Data Commons Property Binder Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.

Vulnerabilities & Patching

CVE-2020-5410: VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.

Vulnerabilities & Patching