Support Content Notification - Support Portal

Product Release Advisory - Cloud Service Broker for AWS for VMware Tanzu Platform 1.15.0

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36296

Last Updated

03 November 2025

Initial Publication Date

03 November 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.1

WorkAround

Affected CVE

See CVE list in advisory

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS V3.1 Score	9.1 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" is is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
cf-cli	CVE-2025-22871 (Critical) CVE-2025-4674 (High) CVE-2025-22868 - GHSA-6v2p-p543-phr9 (High) CVE-2025-47907 (High) CVE-2025-4673 (Medium) CVE-2025-47906 (Medium) CVE-2025-0913 (Medium)
csb-aws	CVE-2024-45337 - GHSA-v778-237x-gjrc (Critical) CVE-2025-4674 (High) CVE-2025-30204 - GHSA-mh63-6h87-95cp (High) CVE-2025-22874 (High) CVE-2025-47907 (High) CVE-2025-4673 (Medium) CVE-2025-47906 (Medium) CVE-2025-22872 - GHSA-vvgc-356p-c3xw (Medium) CVE-2025-27144 - GHSA-c6gw-w398-hv78 (Medium) CVE-2025-0913 (Medium) CVE-2022-29526 - GHSA-p782-xgp4-8hr8 (Medium) CVE-2025-22870 - GHSA-qxp5-gwg8-xv66 (Medium)
routing	CVE-2024-45337 - GHSA-v778-237x-gjrc (Critical) CVE-2025-22871 (Critical) CVE-2025-4674 (High) CVE-2024-53427 (High) CVE-2025-22869 - GHSA-hcg3-q754-cr77 (High) CVE-2025-22868 - GHSA-6v2p-p543-phr9 (High) CVE-2023-39325 - GHSA-4374-p667-p6c8 (High) CVE-2025-48060 (High) CVE-2025-22874 (High) CVE-2025-47907 (High) CVE-2025-4673 (Medium) CVE-2025-47906 (Medium) CVE-2024-23337 (Medium) CVE-2023-3978 - GHSA-2wrh-6pvc-2jm9 (Medium) CVE-2025-22872 - GHSA-vvgc-356p-c3xw (Medium) CVE-2025-0913 (Medium) CVE-2023-44487 - GHSA-qppj-fm5r-hxr3 (Medium) CVE-2022-29526 - GHSA-p782-xgp4-8hr8 (Medium) CVE-2023-45288 - GHSA-4v7x-pqxf-cx7m (Medium) CVE-2025-22870 - GHSA-qxp5-gwg8-xv66 (Medium)