Known vulnerabilities in VMware Aria Operations (formerly vRealize Operations) 8.6.4 - page 2

Vendor: Broadcom
Version: 8.6.4
Software CPE: cpe:2.3:a:broadcom:aria_operations:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Aria Operations (formerly vRealize Operations) version 8.6.4 VMware Aria Operations (formerly vRealize Operations) 8.6.4 is affected by 25 vulnerabilities: 1 critical, 1 high, 3 medium, 20 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76057 - Permissions, Privileges, and Access Controls
CVE-2023-20880
CWE-264 Low
No
No
8.6.10, 8.10.4 12.05.2023 SB2023051209
#VU71712 - Cross-Site Request Forgery (CSRF)
CVE-2023-20856
CWE-352 Medium
No
No
8.6.4 21139695 31.01.2023 SB2023013122
#VU70388 - Improper Access Control
CVE-2022-31708
CWE-284 Low
No
No
8.6.4 20823815, 8.10.1 16.12.2022 SB2022121601
#VU70387 - Improper Privilege Management
CVE-2022-31707
CWE-269 Medium
No
No
8.6.4 20823815, 8.10.1 16.12.2022 SB2022121601
#VU68124 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31682
CWE-200 Low
No
No
8.10 11.10.2022 SB2022101138


Showing elements 21 - 40 out of 25