Description
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware Aria Operations for Logs | 8.x – < 8.18.3 | 8.18.3 |
Advisories 2
- WID-SEC-2025-0228 VMware Aria Operations, VMware Aria Operations for Logs und VMware Cloud Foundation:: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 25, 2025
- NCSC-2025-0037 Kwetsbaarheden verholpen in VMware Aria Operations NCSC-NL (Netherlands) · Jan 31, 2025