Vendor

VMware Tanzu

As of , 3 VMware Tanzu vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2022-22963.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2022-22963Function Remote Code ExecutionVMware Tanzu Spring CloudPatch this weekMetasploit module; EPSS 0.990.99
2CVE-2020-5410Spring Cloud Config Directory TraversalVMware Tanzu Spring Cloud Configuration (Config) ServerPatch this weekMetasploit module; EPSS 0.960.96
3CVE-2018-1273Property BinderVMware Tanzu Spring Data CommonsPatch this weekRansomware use; EPSS 0.970.97

Products

  • Spring Cloud1 entry
  • Spring Cloud Configuration (Config) Server1 entry
  • Spring Data Commons1 entry

Added each year

1232022: 3320222023: nonenone20232024: nonenone20242025: nonenone20252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20223
2023none
2024none
2025none
2026none

Used in ransomware