Known vulnerabilities in Aria Automation (formerly vRealize Automation) - page 2

Known vulnerabilities in Aria Automation (formerly vRealize Automation) - page 2

Vendor: Broadcom

Software: Aria Automation (formerly vRealize Automation)

Software CPE: cpe:2.3:a:broadcom:vrealize_automation:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 29

Public exploits: 5

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (29)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU59054 - Server-Side Request Forgery (SSRF) CVE-2021-22056	CWE-918	Low	No	No	-	20.12.2021	SB2021122001 SB2021122002 SB2021122003
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	-	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU55615 - Server-Side Request Forgery (SSRF) CVE-2021-22002	CWE-918	High	No	No	-	05.08.2021	SB2021080524 SB2021080525 SB2021080526 and 3 more
#VU14411 - Exposure of sensitive information to an unauthorized actor CVE-2018-3620	CWE-200	Low	No	No	-	15.08.2018	SB2018081502 SB2018081506 SB2018081508 and 35 more
#VU11825 - Permissions, Privileges, and Access Controls CVE-2018-6959	CWE-264	Low	No	No	-	13.04.2018	SB2018041302
#VU11824 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-6958	CWE-79	Low	No	No	-	13.04.2018	SB2018041302
#VU39959 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2016-7460	CWE-611	High	No	No	-	29.12.2016	SB2016122905
#VU350 - Permissions, Privileges, and Access Controls CVE-2016-5336	CWE-264	High	No	No	-	27.08.2016	SB2016082401
#VU349 - Permissions, Privileges, and Access Controls CVE-2016-5335	CWE-264	Low	No	No	-	27.08.2016	SB2016082401

Showing elements 21 - 40 out of 29