Known vulnerabilities in VMware Aria Operations (formerly vRealize Operations) - page 2

Vendor: VMware, Inc
Software: VMware Aria Operations (formerly vRealize Operations)
Software CPE: cpe:2.3:a:vmware:aria_operations:*:*:*:*:*:*:*:*
Website: https://www.vmware.com
Total vulnerabilities: 33
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VMware Aria Operations (formerly vRealize Operations) VMware Aria Operations (formerly vRealize Operations) is affected by 33 known vulnerabilities: 2 critical, 2 high, 3 medium, 26 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76053 - Permissions, Privileges, and Access Controls
CVE-2023-20877		 CWE-264 Medium
No
No
 8.6.10, 8.10.4 12.05.2023 SB2023051209
#VU71712 - Cross-Site Request Forgery (CSRF)
CVE-2023-20856		 CWE-352 Medium
No
No
 8.6.4 21139695 31.01.2023 SB2023013122
#VU70388 - Improper Access Control
CVE-2022-31708		 CWE-284 Low
No
No
 8.6.4 20823815, 8.10.1 16.12.2022 SB2022121601
#VU70387 - Improper Privilege Management
CVE-2022-31707		 CWE-269 Medium
No
No
 8.6.4 20823815, 8.10.1 16.12.2022 SB2022121601
#VU68124 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31682		 CWE-200 Low
No
No
 8.10 11.10.2022 SB2022101138
#VU66354 - Improper Authentication
CVE-2022-31675		 CWE-287 High
No
No
 8.6.4 10.08.2022 SB2022081015
SB2022081126
#VU66353 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31674		 CWE-200 Low
No
No
 8.6.4 10.08.2022 SB2022081015
SB2022081126
#VU66352 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31673		 CWE-200 Low
No
No
 8.6.4 10.08.2022 SB2022081015
SB2022081126
#VU66351 - Permissions, Privileges, and Access Controls
CVE-2022-31672		 CWE-264 Low
No
No
 8.6.4 10.08.2022 SB2022081015
SB2022081126
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU57288 - Server-Side Request Forgery (SSRF)
CVE-2021-22033		 CWE-918 Low
No
No
 8.6.0 12.10.2021 SB2021101232
SB2021101235
SB2022010422
#VU16594 - Permissions, Privileges, and Access Controls
CVE-2018-6978		 CWE-264 Low
No
No
 6.6.1.11286876, 6.7.0.11286837, 7.0.0.11287810 18.12.2018 SB2018121817
#VU9930 - Permissions, Privileges, and Access Controls
CVE-2017-4946		 CWE-264 Low
No
No
 - 10.01.2018 SB2018011010


Showing elements 21 - 40 out of 33