Known vulnerabilities in Aria Operations for Logs (formerly vRealize Log Insight) 8.4.1 18603443

Known vulnerabilities in Aria Operations for Logs (formerly vRealize Log Insight) 8.4.1 18603443

Vendor: Broadcom

Software: Aria Operations for Logs (formerly vRealize Log Insight)

Version: 8.4.1 18603443

Software CPE: cpe:2.3:a:broadcom:vreaalize_log_insight:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 13

Public exploits: 5

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU103467 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-22221	CWE-79	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103466 - Improper Privilege Management CVE-2025-22220	CWE-269	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103465 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-22219	CWE-79	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU103463 - Exposure of sensitive information to an unauthorized actor CVE-2025-22218	CWE-200	Low	No	No	8.18.3	31.01.2025	SB2025013104
#VU82268 - Deserialization of Untrusted Data CVE-2023-34052	CWE-502	High	No	No	8.14	20.10.2023	SB2023102007
#VU82267 - Improper Authentication CVE-2023-34051	CWE-287	High	Public exploit available	No	8.14	20.10.2023	SB2023102007
#VU71731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31706	CWE-22	High	Public exploit available	No	8.10.2	01.02.2023	SB2023012454
#VU71489 - Exposure of sensitive information to an unauthorized actor CVE-2022-31711	CWE-200	Medium	Public exploit available	No	8.10.2	24.01.2023	SB2023012454
#VU71488 - Deserialization of Untrusted Data CVE-2022-31710	CWE-502	Medium	No	No	8.10.2	24.01.2023	SB2023012454
#VU71487 - Improper Access Control CVE-2022-31704	CWE-284	Critical	Public exploit available	No	8.10.2	24.01.2023	SB2023012454
#VU65209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31655	CWE-79	Low	No	No	8.8.2	12.07.2022	SB2022071252 SB2022081126
#VU65208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31654	CWE-79	Low	No	No	8.8.2	12.07.2022	SB2022071252 SB2022081126
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Public exploit available	Exploited	-	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more