Description
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Aria Operations for Networks | VMware Aria Operations for Networks 6.x | — |
Advisories 1
- WID-SEC-2024-0304 VMware Aria Operations for Networks: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 6, 2024