Skip to content
OpenAdvisories
High WID-SEC-2026-1813 3 CVEs

VMware Cloud Foundation Operations: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Jun 7, 2026 · Updated Jun 8, 2026 · Revision 2 · de-DE

Vendor: VMware Product: Aria Operations Product: Cloud Foundation Product: vSphere Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in VMware Cloud Foundation, VMware Aria Operations und VMware vSphere ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, wodurch er möglicherweise administrative Aktionen ausführen kann.

Product

VMware Cloud Foundation ist eine Hybrid Cloud-Plattform für VM-Management und Container-Orchestrierung.
VMware Aria Operations bietet eine einheitliche Plattform für das IT-Betriebsmanagement in Private-, Hybrid- und Multi-Cloud-Umgebungen.
Die Virtualisierungssoftware von VMware ermöglicht die simultane Ausführung von verschiedenen Betriebssystemen auf einem Host-System.

Vulnerabilities 3

  • High 8.0
    CVE-2026-41722

    VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

    VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

    VMware VMware Aria Operations VMware Telco Cloud Platform VCF operations
  • High 8.0
    CVE-2026-41723

    VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

    VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

    VMware VMware Aria Operations VMware Telco Cloud Platform VCF operations
  • High 8.0
    CVE-2026-41724

    VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

    VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

    VMware VMware Aria Operations VMware Telco Cloud Platform VCF operations

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-35030, EUVD-2026-35031, EUVD-2026-35032

  2. #1

    Initiale Fassung

References