Known vulnerabilities in Aria Operations for Logs (formerly vRealize Log Insight) 8.0.0

Known vulnerabilities in Aria Operations for Logs (formerly vRealize Log Insight) 8.0.0

Vendor: Broadcom

Software: Aria Operations for Logs (formerly vRealize Log Insight)

Version: 8.0.0

Software CPE: cpe:2.3:a:broadcom:vreaalize_log_insight:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 16

Public exploits: 4

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU103467 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-22221	CWE-79	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103466 - Improper Privilege Management CVE-2025-22220	CWE-269	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103465 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-22219	CWE-79	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103463 - Exposure of sensitive information to an unauthorized actor CVE-2025-22218	CWE-200	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU82268 - Deserialization of Untrusted Data CVE-2023-34052	CWE-502	High	No	No	8.14	20.10.2023	SB2023102007
#VU82267 - Improper Authentication CVE-2023-34051	CWE-287	High	Public exploit available	No	8.14	20.10.2023	SB2023102007
#VU71731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31706	CWE-22	High	Public exploit available	No	8.10.2	01.02.2023	SB2023012454
#VU71489 - Exposure of sensitive information to an unauthorized actor CVE-2022-31711	CWE-200	Medium	Public exploit available	No	8.10.2	24.01.2023	SB2023012454
#VU71488 - Deserialization of Untrusted Data CVE-2022-31710	CWE-502	Medium	No	No	8.10.2	24.01.2023	SB2023012454
#VU71487 - Improper Access Control CVE-2022-31704	CWE-284	Critical	Public exploit available	No	8.10.2	24.01.2023	SB2023012454
#VU65209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31655	CWE-79	Low	No	No	8.8.2	12.07.2022	SB2022071252 SB2022081126
#VU65208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31654	CWE-79	Low	No	No	8.8.2	12.07.2022	SB2022071252 SB2022081126
#VU57322 - Improper Control of Generation of Code ('Code Injection') CVE-2021-22035	CWE-94	Medium	No	No	8.1.1 18457068, 8.2.0 18430722, 8.4.1 18603443	13.10.2021	SB2021101303 SB2022010422
#VU56094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22021	CWE-79	Low	No	No	8.1.1 18457068, 8.2.0 18430722, 8.3.0 18430451	25.08.2021	SB2021082519 SB2021101003
#VU26967 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2020-3954	CWE-601	Medium	No	No	8.1.0	15.04.2020	SB2020041520 SB2022080311
#VU26966 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-3953	CWE-79	Low	No	No	8.1.0	15.04.2020	SB2020041520 SB2022080311