Known vulnerabilities in VMware Aria Operations (formerly vRealize Operations) 6.7.0.11286837

Vendor: VMware, Inc
Software: VMware Aria Operations (formerly vRealize Operations)
Version: 6.7.0.11286837
Software CPE: cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting VMware Aria Operations (formerly vRealize Operations) version 6.7.0.11286837 VMware Aria Operations (formerly vRealize Operations) 6.7.0.11286837 is affected by 3 vulnerabilities: 1 critical, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123149 - Permissions, Privileges, and Access Controls
CVE-2026-22721		 CWE-264 Low
No
No
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU123148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22720		 CWE-79 Low
No
No
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402
#VU123146 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-22719		 CWE-78 Critical
No
Exploited
 8.18.6, 9.0.2.0 24.02.2026 SB2026022402