Skip to content
OpenAdvisories

Product · VMware

VMware Aria Operations

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-22721

    VMware Aria Operations privilege escalation vulnerability

    VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721…

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation
  • Medium 4.9
    CVE-2025-41245

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.

    VMware VMware Aria Operations VMware Telco Cloud Platform VMware Cloud Foundation
  • Medium 6.5
    CVE-2024-38834

    Stored cross-site scripting vulnerability (CVE-2024-38834)

    VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cloud provider might be able to inject malicious script leading to stored cross-site scripting in the product VMware Aria Operations.

    VMware VMware Aria Operations
  • Medium 6.8
    CVE-2024-38833

    Stored cross-site scripting vulnerability (CVE-2024-38833)

    VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious script leading to stored cross-site scripting in the product VMware Aria Operations.

    VMware VMware Aria Operations