Aria Operations (Vmware) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 23 known versions, newest CVE from 2026-06-08. Vendor: Vmware.
CVEs of Aria Operations
- CVE-2026-41724 - CVSS 8 (high), 2026-06-08: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views…
- CVE-2026-41723 - CVSS 8 (high), 2026-06-08: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views…
- CVE-2026-41722 - CVSS 8 (high), 2026-06-08: VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views…
- CVE-2026-22721 - CVSS 7.2 (high), 2026-02-25: VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this…
- CVE-2026-22720 - CVSS 9 (critical), 2026-02-25: VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to…
- CVE-2026-22719 - CVSS 8.1 (high), 2026-02-25: VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands…
- CVE-2025-41244 - CVSS 7.8 (high), 2025-09-29: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having…
- CVE-2025-22222 - CVSS 7.7 (high), 2025-01-30: VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to…
- CVE-2024-38830 - CVSS 7.8 (high), 2024-11-26: VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may trigger this…
- CVE-2024-38833 - CVSS 6.8 (medium), 2024-11-26: VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious…
- CVE-2024-38832 - CVSS 7.1 (high), 2024-11-26: VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to views may be able to inject malicious…
- CVE-2024-38831 - CVSS 7.8 (high), 2024-11-26: VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious…
- CVE-2024-38834 - CVSS 6.5 (medium), 2024-11-26: VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cloud provider might be able to inject…
- CVE-2024-22235 - CVSS 6.7 (medium), 2024-02-21: VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate…
- CVE-2023-34043 - CVSS 6.7 (medium), 2023-09-27: VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate…
- CVE-2023-20880 - CVSS 6.7 (medium), 2023-05-12: VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges…
