Support Content Notification - Support Portal

Product Release Advisory - Telemetry for VMware Tanzu Platform 2.3.0

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36355

Last Updated

05 November 2025

Initial Publication Date

05 November 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.8

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Telemetry for VMware Tanzu Platform 2.3.0

Advisory ID	TNZ-2025-0185
Tanzu Issue Date	2025-10-29
Updated on

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS V3.1 Score	9.8 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" is is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Product Release Telemetry for VMware Tanzu Platform 2.3.0
Product Release Notes: https://techdocs.broadcom.com/us/en/vmware-tanzu/platform-services/telemetry-for-tanzu/2-2/telemetry-tanzu/release-notes.html

Security Fixes This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
bpm	CVE-2024-24790 (Critical) CVE-2023-29405 (Critical) CVE-2023-29404 (Critical) CVE-2023-29402 (Critical) CVE-2023-24540 (Critical) CVE-2023-24538 (Critical) CVE-2023-24531 (Critical) CVE-2021-38297 (Critical) CVE-2025-22871 (Critical) CVE-2022-23806 (Critical) CVE-2023-39323 (High) CVE-2023-29403 (High) CVE-2022-30580 (High) CVE-2024-34158 (High) CVE-2024-34156 (High) CVE-2024-24791 (High) CVE-2024-24784 (High) CVE-2023-45288 (High) CVE-2023-45287 (High) CVE-2023-45285 (High) CVE-2023-45283 (High) CVE-2023-44487 (High) CVE-2023-24537 (High) CVE-2023-24536 (High) CVE-2023-24534 (High) CVE-2022-41725 (High) CVE-2022-41724 (High) CVE-2022-41723 (High) CVE-2022-41722 (High) CVE-2022-41720 (High) CVE-2022-41716 (High) CVE-2022-41715 (High) CVE-2022-32189 (High) CVE-2022-30635 (High) CVE-2022-30634 (High) CVE-2022-30633 (High) CVE-2022-30632 (High) CVE-2022-30631 (High) CVE-2022-30630 (High) CVE-2022-29804 (High) CVE-2022-2880 (High) CVE-2022-2879 (High) CVE-2022-28327 (High) CVE-2022-28131 (High) CVE-2022-27664 (High) CVE-2022-24921 (High) CVE-2022-24675 (High) CVE-2022-23773 (High) CVE-2022-23772 (High) CVE-2021-44716 (High) CVE-2021-41772 (High) CVE-2021-41771 (High) CVE-2021-39293 (High) CVE-2023-29400 (High) CVE-2023-24539 (High) CVE-2023-45290 (Medium) CVE-2023-29406 (Medium) CVE-2022-32148 (Medium) CVE-2022-1705 (Medium) CVE-2024-24787 (Medium) CVE-2024-45341 (Medium) CVE-2024-45336 (Medium) CVE-2023-39319 (Medium) CVE-2023-39318 (Medium) CVE-2024-24783 (Medium) CVE-2024-24789 (Medium) CVE-2022-1962 (Medium) CVE-2024-24785 (Medium) CVE-2023-45284 (Medium) CVE-2023-39326 (Medium) CVE-2023-29409 (Medium) CVE-2023-24532 (Medium) CVE-2022-41717 (Medium) CVE-2022-29526 (Medium) CVE-2021-44717 (Medium) CVE-2024-34155 (Medium) CVE-2023-45289 (Medium) CVE-2025-22866 (Medium) CVE-2022-30629 (Low)
telemetry	CVE-2025-22871 (Critical) CVE-2025-4674 (High) CVE-2024-41123 - GHSA-r55c-59qm-vjw6 (High) CVE-2024-41946 - GHSA-5866-49gr-22v4 (High) CVE-2024-49761 - GHSA-2rxp-v6pw-ch6m (High) CVE-2025-47907 (High) CVE-2025-4673 (Medium) CVE-2025-25186 - GHSA-7fc5-f82f-cx69 (Medium) CVE-2025-47906 (Medium) CVE-2024-45341 (Medium) CVE-2024-45336 (Medium) CVE-2025-32955 - GHSA-mxr3-8whj-j74r (Medium) CVE-2025-43857 - GHSA-j3g3-5qv5-52mj (Medium) CVE-2024-43398 - GHSA-vmwr-mc7x-5vc3 (Medium) CVE-2025-27219 - GHSA-gh9q-2xrm-x6qv (Medium) CVE-2023-38037 - GHSA-cr5q-6q9f-rq6q (Medium) CVE-2025-0913 (Medium) CVE-2025-24294 - GHSA-xh69-987w-hrp8 (Medium) CVE-2024-35176 - GHSA-vg3r-rm7w-2xgh (Medium) CVE-2023-28120 - GHSA-pj73-v5mw-pm9j (Medium) CVE-2024-27281 - GHSA-592j-995h-p23j (Medium) CVE-2024-39908 - GHSA-4xqq-m2hx-25v8 (Medium) CVE-2025-27220 - GHSA-mhwm-jh88-3gjf (Medium) CVE-2025-22866 (Medium) CVE-2025-27221 - GHSA-22h5-pq3x-2gf2 (Low) CVE-2023-22796 - GHSA-j6gc-792m-qgm2 (Low)