Support Content Notification - Support Portal

Product Release Advisory - Cloud Service Broker for Azure for VMware Tanzu Platform 1.13.1

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36304

Last Updated

04 November 2025

Initial Publication Date

04 November 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.1

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Cloud Service Broker for Azure for VMware Tanzu Platform 1.13.1

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS V3.1 Score	9.1 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" is is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
cf-cli	CVE-2025-22871 (Critical) CVE-2025-4674 (High) CVE-2025-22868 - GHSA-6v2p-p543-phr9 (High) CVE-2025-47907 (High) CVE-2025-4673 (Medium) CVE-2025-47906 (Medium) CVE-2025-0913 (Medium)
csb-azure	CVE-2024-45337 - GHSA-v778-237x-gjrc (Critical) CVE-2025-4674 (High) CVE-2025-47907 (High) CVE-2025-47906 (Medium) CVE-2022-29526 - GHSA-p782-xgp4-8hr8 (Medium)
routing	CVE-2024-45337 - GHSA-v778-237x-gjrc (Critical) CVE-2025-22871 (Critical) CVE-2025-4674 (High) CVE-2025-22869 - GHSA-hcg3-q754-cr77 (High) CVE-2025-22868 - GHSA-6v2p-p543-phr9 (High) CVE-2025-22874 (High) CVE-2025-47907 (High) CVE-2025-4673 (Medium) CVE-2025-47906 (Medium) CVE-2025-22872 - GHSA-vvgc-356p-c3xw (Medium) CVE-2025-49014 (Medium) CVE-2025-0913 (Medium) CVE-2022-29526 - GHSA-p782-xgp4-8hr8 (Medium) CVE-2025-22870 - GHSA-qxp5-gwg8-xv66 (Medium)