Priority LOW 37
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform admini…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00313 · Published 2026-06-08 · No fix listed CWE-79
Priority LOW 37
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform admini…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00399 · Published 2026-06-08 · No fix listed CWE-79
Priority LOW 37
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform admini…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00302 · Published 2026-06-08 · No fix listed CWE-79
Priority LOW 35
VMware Aria Operations contains a privilege escalation vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00739 · Published 2026-02-25 · Fixed in 8.18.6, 5.2.3 +1 CWE-269
Priority MEDIUM 41
VMware Aria Operations contains a stored cross-site scripting vulnerability.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.00447 · Published 2026-02-25 · Fixed in 8.18.6, 5.2.3 +2 CWE-79
Priority CRITICAL 94KEV
VMware Aria Operations contains a command injection vulnerability.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.18321 · Published 2026-02-25 · Fixed in 8.18.6, 9.0.2 +1 CWE-77
Priority CRITICAL 93KEV
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.15841 · Published 2025-09-29 · Fixed in 9.0.1.0, 13.0.5.0 +2 CWE-267
Priority LOW 34
VMware Aria Operations contains an information disclosure vulnerability.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00548 · Published 2025-01-30 · Fixed in 8.18.3 CWE-497
Priority LOW 29
VMware Aria Operations contains a stored cross-site scripting vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00332 · Published 2024-11-26 · Fixed in 8.18.2 CWE-79
Priority LOW 30
VMware Aria Operations contains a stored cross-site scripting vulnerability.
CVSS 3.1MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.00423 · Published 2024-11-26 · Fixed in 8.18.2 CWE-79
Priority LOW 32
VMware Aria Operations contains a stored cross-site scripting vulnerability.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2024-11-26 · Fixed in 8.18.2 CWE-79
Priority LOW 36
VMware Aria Operations contains a local privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00293 · Published 2024-11-26 · Fixed in 8.18.2 CWE-77
Priority LOW 35
VMware Aria Operations contains a local privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2024-11-26 · Fixed in 8.18.2 CWE-269
Priority LOW 31
VMware Aria Operations contains a local privilege escalation vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00194 · Published 2024-02-21 · No fix listed CWE-269
Priority LOW 31
VMware Aria Operations contains a local privilege escalation vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00186 · Published 2023-09-26 · No fix listed CWE-269
Priority LOW 31
VMware Aria Operations contains a privilege escalation vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00224 · Published 2023-05-12 · No fix listed CWE-863
THREATIST.IORead the docs