Vmware Aria Operations For Networks — known CVE vulnerabilities

Every CVE whose affected-product data names Vmware Aria Operations For Networks, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2023-20887 — CVSS 9.8 (critical) — actively exploited: Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations…
• CVE-2023-34039 — CVSS 9.8 (critical): Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A…
• CVE-2024-22237 — CVSS 7.8 (high): Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for…
• CVE-2023-20890 — CVSS 7.2 (high): Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to…
• CVE-2024-22238 — CVSS 6.4 (medium): Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject…
• CVE-2024-22239 — CVSS 5.3 (medium): Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for…
• CVE-2024-22240 — CVSS 4.9 (medium): Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may exploit this…
• CVE-2024-22241 — CVSS 4.3 (medium): Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious…