Description
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations as admin user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware Aria Operations for Logs | 8.x – < 8.18.3 | 8.18.3 |
Advisories 2
- WID-SEC-2025-0228 VMware Aria Operations, VMware Aria Operations for Logs und VMware Cloud Foundation:: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 25, 2025
- NCSC-2025-0037 Kwetsbaarheden verholpen in VMware Aria Operations NCSC-NL (Netherlands) · Jan 31, 2025