AO
Product
Aria Operations
On CISA KEVExploited in the wild
16
CVEs
2
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 9Low 0
Watch
Add Aria Operations to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22719 In wildKEV | 8.1 | Feb 25 | VMware Aria Operations command injection vulnerability Affected: 8.0 before 8.18.6 |
| CVE-2025-41244 In wildKEV | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 8.0 before 8.18.5 |
| CVE-2026-22720 | 9.0 | Feb 25 | VMware Aria Operations contains a stored cross-site scripting vulnerability Affected: 8.0 before 8.18.6 |
| CVE-2026-41723 | 8.0 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.0 before 8.18.7 |
| CVE-2024-38831 | 7.8 | Nov 26 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious commands into the… Affected: 8.0 before 8.18.2 |
| CVE-2024-38830 | 7.8 | Nov 26 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may trigger this vulnerability to escalate… Affected: 8.0 before 8.18.2 |
| CVE-2026-22721 | 7.2 | Feb 25 | VMware Aria Operations contains a privilege escalation vulnerability Affected: 8.0 before 8.18.6 |
| CVE-2024-22235 | 6.7 | Feb 21 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root' Affected: 8.6.0 before 8.16.0 |
| CVE-2023-34043 | 6.7 | Sep 27 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root' Affected: 8.6.0; 8.10.0; 8.12.0; 8.12.0; 8.12.0; 8.12.0 |
| CVE-2023-20880 | 6.7 | May 12 | VMware Aria Operations contains a privilege escalation vulnerability Affected: 8.6.0 before 8.12.0 |
| CVE-2025-22222 | 6.5 | Jan 30 | VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials… Affected: 8.0 before 8.18.3 |
| CVE-2024-38832 | 6.4 | Nov 26 | VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to views may be able to inject malicious script leading to… Affected: 8.0 before 8.18.2 |
| CVE-2026-41724 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.0 before 8.18.7 |
| CVE-2026-41722 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.0 before 8.18.7 |
| CVE-2024-38833 | 5.4 | Nov 26 | VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious script leading to… Affected: 8.0 before 8.18.2 |
| CVE-2024-38834 | 4.8 | Nov 26 | VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cloud provider might be able to inject malicious script… Affected: 8.0 before 8.18.2 |
Showing 16