Vrealize Operations (Vmware) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 43 known versions, newest CVE from 2023-05-12. Vendor: Vmware.
CVEs of Vrealize Operations
- CVE-2023-20878 - CVSS 7.2 (high), 2023-05-12: VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt…
- CVE-2023-20877 - CVSS 8.8 (high), 2023-05-12: VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution…
- CVE-2023-20879 - CVSS 6.7 (medium), 2023-05-12: VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations…
- CVE-2023-20856 - CVSS 8.8 (high), 2023-02-01: VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the…
- CVE-2022-31708 - CVSS 4.9 (medium), 2022-12-16: vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity…
- CVE-2022-31707 - CVSS 7.2 (high), 2022-12-16: vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity…
- CVE-2022-31682 - CVSS 4.9 (medium), 2022-10-11: VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files…
- CVE-2022-31675 - CVSS 7.5 (high), 2022-08-10: VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a…
- CVE-2022-31674 - CVSS 4.3 (medium), 2022-08-10: VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that…
- CVE-2022-31673 - CVSS 8.8 (high), 2022-08-10: VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex…
- CVE-2022-31672 - CVSS 7.2 (high), 2022-08-10: VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root.
- CVE-2021-22033 - CVSS 2.7 (low), 2021-10-13: Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
- CVE-2020-3943 - CVSS 9.8 (critical), 2020-02-19: vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An…
- CVE-2020-3945 - CVSS 7.5 (high), 2020-02-19: vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect…
- CVE-2020-3944 - CVSS 8.6 (high), 2020-02-19: vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication…
- CVE-2018-6978 - CVSS 6.7 (medium), 2018-12-18: vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation…
- CVE-2016-7457 - CVSS 10 (critical), 2016-12-29: VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via…
- CVE-2016-7462 - CVSS 8.5 (high), 2016-12-29: The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename…
