Support Content Notification - Support Portal

Product Release Advisory - VMware Tanzu GemFire 10.0.7

Product/Component

VMware Tanzu Data Intelligence

3 more products

Notification Id

36734

Last Updated

28 December 2025

Initial Publication Date

28 December 2025

Status

CLOSED

Severity

HIGH

CVSS Base Score

8.5

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - VMware Tanzu GemFire 10.0.7

	Highest Score CVE from list below advisory details
Severity	High
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS V3.1 Score	8.8 (Sev: HIGH)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
VMware-Tanzu-GemFire	CVE-2025-48734 - BDSA-2025-4668 (High) CVE-2025-58057 (High) CVE-2025-58056 (High) CVE-2025-55163 (High) CVE-2025-24970 (High) CVE-2025-55754 - BDSA-2025-14738 (High) CVE-2025-5115 - BDSA-2025-9581 (Medium) CVE-2025-48924 - BDSA-2025-6881 (Medium) CVE-2025-52520 - BDSA-2025-6848 (Medium) CVE-2025-48976 - BDSA-2025-5248 (Medium) CVE-2025-22235 - BDSA-2025-3548 (Medium) CVE-2025-22228 - BDSA-2025-2271 (Medium) CVE-2024-57699 - BDSA-2025-0966 (Medium) CVE-2025-25193 (Medium) CVE-2024-38807 - BDSA-2024-5686 (Medium) CVE-2025-59419 - BDSA-2025-13945 (Medium) CVE-2025-68161 - BDSA-2025-68245 (Medium) CVE-2025-61795 - BDSA-2025-14740 (Medium) CVE-2024-6763 - BDSA-2024-7229 (Low)

Component

Vulnerabilities Resolved

VMware-Tanzu-GemFire