Vmware Aria Operations — known CVE vulnerabilities

Every CVE whose affected-product data names Vmware Aria Operations, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2026-22719 — CVSS 8.1 (high) — actively exploited: VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute…
• CVE-2026-41722 — CVSS 8.0 (high): VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to…
• CVE-2026-22720 — CVSS 8.0 (high): VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks…
• CVE-2026-41724 — CVSS 8.0 (high): VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to…
• CVE-2026-41723 — CVSS 8.0 (high): VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to…
• CVE-2024-38831 — CVSS 7.8 (high): VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can…
• CVE-2024-38830 — CVSS 7.8 (high): VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may…
• CVE-2025-41244 — CVSS 7.8 (high) — actively exploited: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative…
• CVE-2025-22222 — CVSS 7.7 (high): VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit…
• CVE-2024-38832 — CVSS 7.1 (high): VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to views may be able to…
• CVE-2024-38833 — CVSS 6.8 (medium): VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might…
• CVE-2023-34043 — CVSS 6.7 (medium): VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local…
• CVE-2023-20880 — CVSS 6.7 (medium): VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to the local system can…
• CVE-2024-22235 — CVSS 6.7 (medium): VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local…
• CVE-2024-38834 — CVSS 6.5 (medium): VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cloud provider might…
• CVE-2026-22721 — CVSS 6.2 (medium): VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria…