TI-2023-07295 CVE-2023-20879 · GHSA-vwrx-67m6-2266
VMware Aria Operations contains a Local privilege escalation vulnerability.
Priority LOW 31
VMware Aria Operations contains a Local privilege escalation vulnerability.
Vulnerabilities
18 records
TI-2023-07294 CVE-2023-20878 · GHSA-6xfq-86q7-v85v
Deserialization of untrusted data in VMware Aria Operations
Priority LOW 36
VMware Aria Operations contains a deserialization vulnerability.
TI-2023-07293 CVE-2023-20877 · GHSA-ccx6-6vgf-c5rw
Incorrect authorization in VMware Aria Operations
Priority MEDIUM 41
VMware Aria Operations contains a privilege escalation vulnerability.
TI-2023-07275 CVE-2023-20856 · GHSA-6wr9-hw3v-g6rr
Cross-site request forgery in VMware vRealize Operations
Priority MEDIUM 40
VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability.
TI-2022-13626 CVE-2022-31708 · GHSA-456v-qxqw-v893
Improper access control in VMware vRealize Operations
Priority LOW 24
vRealize Operations (vROps) contains a broken access control vulnerability.
TI-2022-13625 CVE-2022-31707 · GHSA-wf52-hx48-jm6v
Improper privilege management in VMware vRealize Operations
Priority LOW 36
vRealize Operations (vROps) contains a privilege escalation vulnerability.
TI-2022-13601 CVE-2022-31682 · GHSA-jjj6-j55h-4rvh
VMware Aria Operations contains an arbitrary file read vulnerability.
Priority LOW 24
VMware Aria Operations contains an arbitrary file read vulnerability.
TI-2022-13592 CVE-2022-31673 · GHSA-vw2x-rp6v-f32f
Information disclosure in VMware vRealize Operations
Priority MEDIUM 44
VMware vRealize Operations contains an information disclosure vulnerability.
TI-2022-13593 CVE-2022-31674 · GHSA-9rcx-r2cj-mhvq
Information disclosure in VMware vRealize Operations
Priority LOW 21
VMware vRealize Operations contains an information disclosure vulnerability.
TI-2022-13594 CVE-2022-31675 · GHSA-c3wc-hvmq-xmp6
VMware vRealize Operations contains an authentication bypass vulnerability.
Priority LOW 34
VMware vRealize Operations contains an authentication bypass vulnerability.
TI-2022-13591 CVE-2022-31672 · GHSA-5cfp-mpf4-f8hr
Improper privilege management in VMware vRealize Operations
Priority LOW 35
VMware vRealize Operations contains a privilege escalation vulnerability.
TI-2021-05075 CVE-2021-22033 · GHSA-r2cc-q3jw-4vhv
Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
Priority LOW 15
Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.
TI-2020-03442 CVE-2020-3943 · GHSA-69hc-w7p9-9v7x
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1)…
Priority MEDIUM 47
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured.
TI-2020-03443 CVE-2020-3944 · GHSA-9468-5fg2-67xr
Improper authentication in VMware vRealize Operations for Horizon Adapter
Priority MEDIUM 40
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass.
TI-2020-03444 CVE-2020-3945 · GHSA-hmjr-69rr-r925
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1)…
Priority LOW 36
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon…
TI-2018-05100 CVE-2018-6978 · GHSA-6www-r2fm-fcq7
vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x…
Priority LOW 30
vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts.
TI-2016-06357 CVE-2016-7462 · GHSA-v9q7-cmc5-22hj
The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows…
Priority MEDIUM 41
The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload th…
TI-2016-06352 CVE-2016-7457 · GHSA-xm6j-mv8r-9mhp
VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users…
Priority MEDIUM 49
VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors.