Known vulnerabilities in VMware Aria Operations (formerly vRealize Operations) 8.18.4

Vendor: Broadcom
Software: VMware Aria Operations (formerly vRealize Operations)
Version: 8.18.4
Software CPE: cpe:2.3:a:broadcom:aria_operations:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Aria Operations (formerly vRealize Operations) version 8.18.4 VMware Aria Operations (formerly vRealize Operations) 8.18.4 is affected by 9 vulnerabilities: 1 critical, 1 high, 7 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134435 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41722		 CWE-79 Low
No
No
 8.18.6 12.06.2026 SB2026061224
#VU134436 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41723		 CWE-79 Low
No
No
 8.18.6 12.06.2026 SB2026061224
#VU134437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41724		 CWE-79 Low
No
No
 8.18.7 12.06.2026 SB2026061224
#VU123149 - Permissions, Privileges, and Access Controls
CVE-2026-22721		 CWE-264 Low
No
No
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU123148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22720		 CWE-79 Low
No
No
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU123146 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-22719		 CWE-78 Critical
No
Exploited
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU116188 - Exposure of sensitive information to an unauthorized actor
CVE-2025-41245		 CWE-200 Low
No
No
 8.18.5 30.09.2025 SB2025093025
#VU116185 - Improper Access Control
CVE-2025-41244		 CWE-284 High
No
Exploited
 8.18.5 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU106378 - Permissions, Privileges, and Access Controls
CVE-2025-22231		 CWE-264 Low
No
No
 8.18.5 02.04.2025 SB2025040209