Advisories · Technology

VMware Aria Operations.

Every CVE that names VMware Aria Operations among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-41724 CVE record

CVSS 8.0 High

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
- VMware VCF operations
- VMware Aria Operations
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2026
CVE-2026-41723 CVE record

CVSS 8.0 High

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
- VMware VCF operations
- VMware Aria Operations
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2026
CVE-2026-41722 CVE record

CVSS 8.0 High

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
- VMware VCF operations
- VMware Aria Operations
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2026
CVE-2026-22721 CVE record

CVSS 6.2 Medium

VMware Aria Operations privilege escalation vulnerability
- VMware Aria Operations
- VMware Cloud Foundation
- Privilege escalation
Not analysed yet 25 Feb 2026
CVE-2026-22720 CVE record

CVSS 8.0 High

VMware Aria Operations stored cross-site scripting vulnerability
- VMware Aria Operations
- VMware Cloud Foundation Operations
- Cross-site scripting (XSS)
Not analysed yet 25 Feb 2026
CVE-2026-22719 CVE record

CVSS 8.1 HighCritical · KEV, CVSS 7+ and EPSSKEV

VMware Aria Operations command injection vulnerability
- VMware Aria Operations
- VMware Cloud Foundation Operations
- Command injection
Not analysed yet 25 Feb 2026
CVE-2025-41245 CVE record

CVSS 4.9 Medium

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
- VMware Aria Operations
- VMware Cloud Foundation
- CWE-1188
Not analysed yet 29 Sept 2025
CVE-2025-41244 CVE record

CVSS 7.8 HighCritical · KEVKEV

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
- VMware VCF operations
- VMware tools
- Privilege escalation
Not analysed yet 29 Sept 2025
CVE-2025-22231 CVE record

CVSS 7.8 High

VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)
- VMware Aria operations
- Privilege escalation
Not analysed yet 1 Apr 2025
CVE-2025-22222 CVE record

CVSS 7.7 High

VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)
- VMware Aria Operations
- Information disclosure
Not analysed yet 30 Jan 2025
CVE-2024-38834 CVE record

CVSS 6.5 Medium

Stored cross-site scripting vulnerability (CVE-2024-38834)
- VMware Aria Operations
- Cross-site scripting (XSS)
Not analysed yet 26 Nov 2024
CVE-2024-38833 CVE record

CVSS 6.8 Medium

Stored cross-site scripting vulnerability (CVE-2024-38833)
- VMware Aria Operations
- Cross-site scripting (XSS)
Not analysed yet 26 Nov 2024
CVE-2024-38832 CVE record

CVSS 7.1 High

Stored cross-site scripting vulnerability (CVE-2024-38832)
- VMware Aria Operations
- Cross-site scripting (XSS)
Not analysed yet 26 Nov 2024
CVE-2024-38831 CVE record

CVSS 7.8 High

Local privilege escalation vulnerability (CVE-2024-38831)
- VMware Aria Operations
- Command injection
Not analysed yet 26 Nov 2024
CVE-2024-38830 CVE record

CVSS 7.8 High

Local privilege escalation vulnerability
- VMware Aria Operations
- Privilege escalation
Not analysed yet 26 Nov 2024
CVE-2024-22235 CVE record

CVSS 6.7 Medium

Improper privilege management in VMware Aria Operations
- VMware Aria Operations
- Privilege escalation
Not analysed yet 21 Feb 2024
CVE-2023-34043 CVE record

CVSS 6.7 Medium

VMware Aria Operations contains a local privilege escalation vulnerability.
- VMware Aria Operations
Not analysed yet 26 Sept 2023
CVE-2022-31682 CVE record

VMware Aria Operations contains an arbitrary file read vulnerability.
- VMware Aria Operations
Not analysed yet 11 Oct 2022