Known vulnerabilities in Aria Operations for Logs (formerly vRealize Log Insight)

Vendor: Broadcom
Software: Aria Operations for Logs (formerly vRealize Log Insight)
Software CPE: cpe:2.3:a:broadcom:vreaalize_log_insight:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 22
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Aria Operations for Logs (formerly vRealize Log Insight) Aria Operations for Logs (formerly vRealize Log Insight) is affected by 22 known vulnerabilities: 3 critical, 4 high, 4 medium, 11 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103467 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22221		 CWE-79 Low
No
No
 8.18.3 31.01.2025 SB2025013104
#VU103466 - Improper Privilege Management
CVE-2025-22220		 CWE-269 Low
No
No
 8.18.3 31.01.2025 SB2025013104
#VU103465 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22219		 CWE-79 Low
No
No
 8.18.3 31.01.2025 SB2025013104
#VU103463 - Exposure of sensitive information to an unauthorized actor
CVE-2025-22218		 CWE-200 Low
No
No
 8.18.3 31.01.2025 SB2025013104
#VU82268 - Deserialization of Untrusted Data
CVE-2023-34052		 CWE-502 High
No
No
 8.14 20.10.2023 SB2023102007
#VU82267 - Improper Authentication
CVE-2023-34051		 CWE-287 High
Available
No
 8.14 20.10.2023 SB2023102007
#VU75387 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-20865		 CWE-78 Low
No
No
 8.12 20.04.2023 SB2023042038
#VU75386 - Deserialization of Untrusted Data
CVE-2023-20864		 CWE-502 Critical
No
No
 8.12 20.04.2023 SB2023042038
#VU71731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31706		 CWE-22 High
Available
No
 8.10.2 01.02.2023 SB2023012454
#VU71489 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31711		 CWE-200 Medium
Available
No
 8.10.2 24.01.2023 SB2023012454
#VU71488 - Deserialization of Untrusted Data
CVE-2022-31710		 CWE-502 Medium
No
No
 8.10.2 24.01.2023 SB2023012454
#VU71487 - Improper Access Control
CVE-2022-31704		 CWE-284 Critical
Available
No
 8.10.2 24.01.2023 SB2023012454
#VU65209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31655		 CWE-79 Low
No
No
 8.8.2 12.07.2022 SB2022071252
SB2022081126
#VU65208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31654		 CWE-79 Low
No
No
 8.8.2 12.07.2022 SB2022071252
SB2022081126
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU57322 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-22035		 CWE-94 Medium
No
No
 8.1.1 18457068, 8.2.0 18430722, 8.4.1 18603443 13.10.2021 SB2021101303
SB2022010422
#VU56094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22021		 CWE-79 Low
No
No
 8.1.1 18457068, 8.2.0 18430722, 8.3.0 18430451 25.08.2021 SB2021082519
SB2021101003
#VU26967 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-3954		 CWE-601 Medium
No
No
 8.1.0 15.04.2020 SB2020041520
SB2022080311
#VU26966 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3953		 CWE-79 Low
No
No
 8.1.0 15.04.2020 SB2020041520
SB2022080311
#VU15886 - Improper Authorization
CVE-2018-6980		 CWE-285 Low
No
No
 4.6.2, 4.7.1 13.11.2018 SB2018111409


Showing elements 1 - 20 out of 22