Vulnerabilidades de vmware aria operations (CVE)

8.0Alta

CVE-2026-41724 hace 4 meses

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

8.0Alta

CVE-2026-41723 hace 4 meses

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

8.0Alta

CVE-2026-41722 hace 4 meses

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

6.2Media

CVE-2026-22721 hace 8 meses

VMware Aria Operations privilege escalation vulnerability

VMware VMware Aria Operations; VMware VMware Cloud Foundation; VMware VMware Telco Cloud Platform; VMware VMware Telco Cloud Infrastructure

VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721…

8.0Alta

CVE-2026-22720 hace 8 meses

VMware Aria Operations stored cross-site scripting vulnerability

VMware VMware Aria Operations; VMware VMware Cloud Foundation Operations; VMware VMware Telco Cloud Platform; VMware VMware Telco Cloud Infrastructure

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations. To remediate CVE-2026-22720,…

8.1Alta

CVE-2026-22719 KEV hace 8 meses

VMware Aria Operations command injection vulnerability

VMware VMware Aria Operations; VMware VMware Cloud Foundation Operations; VMware Telco Cloud Platform; VMware Telco Cloud Infrastructure

VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migratio…

18%EPSS

7.8Alta

CVE-2025-41244 KEV hace 1 año

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

VMware VCF operations; VMware VMware tools; VMware VMware Aria Operations; VMware VMware Cloud Foundation

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

8.6%EPSS

7.7Alta

CVE-2025-22222 hace 1 año

VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)

VMware VMware Aria Operations

VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plugin if a valid service credential ID is known.