CPE Details
VMware Aria Operations For Logs 8.16
8.16
2025-05-22
13h49 +00:00
13h49 +00:00
2025-05-22
13h49 +00:00
13h49 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:vmware:aria_operations_for_logs:8.16:*:*:*:*:*:*:*
Informations
Vendor
vmwareProduct
aria_operations_for_logsVersion
8.16Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration. | 5.2 |
Moyen |
||
| VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user. | 5.4 |
Moyen |
||
| VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations as admin user. | 9 |
Critique |
||
| VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs | 8.5 |
Haute |
