Known vulnerabilities in Aria Operations for Logs (formerly vRealize Log Insight) 8.10

Known vulnerabilities in Aria Operations for Logs (formerly vRealize Log Insight) 8.10

Vendor: Broadcom

Software: Aria Operations for Logs (formerly vRealize Log Insight)

Version: 8.10

Software CPE: cpe:2.3:a:broadcom:vreaalize_log_insight:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 10

Public exploits: 4

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU103467 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-22221	CWE-79	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103466 - Improper Privilege Management CVE-2025-22220	CWE-269	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103465 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-22219	CWE-79	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103463 - Exposure of sensitive information to an unauthorized actor CVE-2025-22218	CWE-200	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU82268 - Deserialization of Untrusted Data CVE-2023-34052	CWE-502	High	No	No	8.14	20.10.2023	SB2023102007
#VU82267 - Improper Authentication CVE-2023-34051	CWE-287	High	Public exploit available	No	8.14	20.10.2023	SB2023102007
#VU71731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31706	CWE-22	High	Public exploit available	No	8.10.2	01.02.2023	SB2023012454
#VU71489 - Exposure of sensitive information to an unauthorized actor CVE-2022-31711	CWE-200	Medium	Public exploit available	No	8.10.2	24.01.2023	SB2023012454
#VU71488 - Deserialization of Untrusted Data CVE-2022-31710	CWE-502	Medium	No	No	8.10.2	24.01.2023	SB2023012454
#VU71487 - Improper Access Control CVE-2022-31704	CWE-284	Critical	Public exploit available	No	8.10.2	24.01.2023	SB2023012454