Description
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious script leading to stored cross-site scripting in the product VMware Aria Operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware Aria Operations | 8.x – < 8.18.2 | 8.18.2 |
Advisories 2
- WID-SEC-2024-3555 VMware Aria Operations: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 10, 2024
- NCSC-2024-0459 Kwetsbaarheden verholpen in VMware Aria Operations NCSC-NL (Netherlands) · Nov 26, 2024