AO
Product
Aria Operations for Networks
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch
Add Aria Operations for Networks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20887 In wildKEV | 9.8 | Jun 7 | Vmware Aria Operations for Networks Command Injection Vulnerability Affected: 6.2.0 through 6.10.0 |
| CVE-2023-34039 | 9.8 | Aug 29 | Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria… Affected: 6.2.0 before 6.11.0 |
| CVE-2024-22239 | 7.8 | Feb 6 | Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to… Affected: 6.0.0 through 6.12.0 |
| CVE-2024-22237 | 7.8 | Feb 6 | Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to… Affected: 6.0.0 through 6.12.0 |
| CVE-2023-20890 | 7.2 | Aug 29 | Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can… Affected: 6.2.0 before 6.11.0 |
| CVE-2024-22240 | 4.9 | Feb 6 | Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may exploit this vulnerability leading to unauthorized access to… Affected: 6.0.0 through 6.12.0 |
| CVE-2024-22241 | 4.8 | Feb 6 | Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious payload into the login banner and… Affected: 6.0.0 through 6.12.0 |
| CVE-2024-22238 | 4.8 | Feb 6 | Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile… Affected: 6.0.0 through 6.12.0 |
Showing 8