How to report VMware GemFire CVEs

Products

• VMware Tanzu Gemfire

Issue/Introduction

This article details how to report VMware GemFire CVEs.

Resolution

CVEs for VMware Tanzu products, including GemFire, are centrally managed at the VMware Tanzu Security Response Center.

The page lists all reported CVEs and contains a search functionality to find out if a CVE has already been reported and what state it is in. Note that fixed CVEs are also documented in the GemFire release notes, so that can be used to get an overview of CVE fixes included in a certain version.

To report a CVE, please send an email to "[email protected]", including the details of the CVE and the product version where the CVE has been discovered. Support tickets should not be opened for CVEs and the security email should only be used to report CVEs and no other forms of product issues. Please refer to the VMware Tanzu Security Response Center for more details.