Product Release Advisory - Elastic Application Runtime Windows add-on for VMware Tanzu Platform 10.3.6
37238
19 March 2026
19 March 2026
CLOSED
HIGH
7.5
N/A
See CVE list in advisory
Product Release Advisory - Elastic Application Runtime Windows add-on for VMware Tanzu Platform 10.3.6
|
Advisory ID |
TNZ-2026-0206 |
|
Tanzu Issue Date |
2026-03-17 |
|
Updated on |
|
Highest Score CVE from list below advisory details |
|
|
Severity |
High |
|
CVSS V4 Vector |
Unavailable |
|
CVSS V4 Score |
Unavailable (Sev: Unavailable) |
|
CVSS V3.1 Vector |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
CVSS V3.1 Score |
6.1 (Sev: MEDIUM) |
|
CVSS V2 Vector |
Unavailable |
|
CVSS V2 Score |
Unavailable (Sev: Unavailable) |
- Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.
Product Version Release Advisory
- Product Release Elastic Application Runtime Windows add-on for VMware Tanzu Platform 10.3.6
- Product Release Notes: https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-platform-for-cloud-foundry/10-2/tpcf/release-notes.html
Security Fixes: This release has the following security fixes, listed by component.
|
Component |
Vulnerabilities Resolved |
|
diego |
|
|
hwc-offline-buildpack |
|