Known vulnerabilities in VMware Aria Operations (formerly vRealize Operations)

Vendor: VMware, Inc
Software: VMware Aria Operations (formerly vRealize Operations)
Software CPE: cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 33
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Aria Operations (formerly vRealize Operations) VMware Aria Operations (formerly vRealize Operations) is affected by 33 known vulnerabilities: 2 critical, 2 high, 3 medium, 26 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134435 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41722		 CWE-79 Low
No
No
 8.18.6 12.06.2026 SB2026061224
#VU134436 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41723		 CWE-79 Low
No
No
 8.18.6 12.06.2026 SB2026061224
#VU134437 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41724		 CWE-79 Low
No
No
 8.18.7 12.06.2026 SB2026061224
#VU123149 - Permissions, Privileges, and Access Controls
CVE-2026-22721		 CWE-264 Low
No
No
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU123148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22720		 CWE-79 Low
No
No
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU123146 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-22719		 CWE-78 Critical
No
Exploited
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU116188 - Exposure of sensitive information to an unauthorized actor
CVE-2025-41245		 CWE-200 Low
No
No
 8.18.5 30.09.2025 SB2025093025
#VU116185 - Improper Access Control
CVE-2025-41244		 CWE-284 High
No
Exploited
 8.18.5 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU106378 - Permissions, Privileges, and Access Controls
CVE-2025-22231		 CWE-264 Low
No
No
 8.18.5 02.04.2025 SB2025040209
#VU103462 - Exposure of sensitive information to an unauthorized actor
CVE-2025-22222		 CWE-200 Low
No
No
 8.18.3 31.01.2025 SB2025013103
#VU101004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38834		 CWE-79 Low
No
No
 8.18.2 27.11.2024 SB2024112760
#VU101003 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38833		 CWE-79 Low
No
No
 8.18.2 27.11.2024 SB2024112760
#VU101002 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38832		 CWE-79 Low
No
No
 8.18.2 27.11.2024 SB2024112760
#VU101001 - Improper Privilege Management
CVE-2024-38831		 CWE-269 Low
No
No
 8.18.2 27.11.2024 SB2024112760
#VU101000 - Improper Privilege Management
CVE-2024-38830		 CWE-269 Low
No
No
 8.18.2 27.11.2024 SB2024112760
#VU86668 - Permissions, Privileges, and Access Controls
CVE-2024-22235		 CWE-264 Low
No
No
 8.16 21.02.2024 SB2024022102
#VU81196 - Improper input validation
CVE-2023-34043		 CWE-20 Low
No
No
 8.6.11, 8.10.9, 8.12.5 26.09.2023 SB2023092666
#VU76057 - Permissions, Privileges, and Access Controls
CVE-2023-20880		 CWE-264 Low
No
No
 8.6.10, 8.10.4 12.05.2023 SB2023051209
#VU76056 - Permissions, Privileges, and Access Controls
CVE-2023-20879		 CWE-264 Low
No
No
 8.6.10, 8.10.4 12.05.2023 SB2023051209
#VU76055 - Deserialization of Untrusted Data
CVE-2023-20878		 CWE-502 Low
No
No
 8.6.10, 8.10.4 12.05.2023 SB2023051209


Showing elements 1 - 20 out of 33