CPE Details
VMware Aria Operations For Logs 8.14
8.14
2025-05-22
13h49 +00:00
13h49 +00:00
2025-05-22
13h49 +00:00
13h49 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:vmware:aria_operations_for_logs:8.14:*:*:*:*:*:*:*
Informations
Vendor
vmwareProduct
aria_operations_for_logsVersion
8.14Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration. | 5.2 |
Medium |
||
| VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user. | 5.4 |
Medium |
||
| VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations as admin user. | 9 |
Critical |
||
| VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs | 8.5 |
High |
