VendorsVMwarearia_operationsall versions
Vulnerabilities

VMware Aria Operations

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2026-22720
VMware Aria Operations stored cross-site scripting vulnerability
Published 2026-02-25 · Analyzed
9.0EPSS 0.004
CVE-2026-22719
VMware Aria Operations command injection vulnerability
Published 2026-02-25 · Analyzed
8.1KEVEPSS 0.177
CVE-2026-41723
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
Published 2026-06-08 · Analyzed
8.0EPSS 0.004
CVE-2026-41722
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
Published 2026-06-08 · Analyzed
8.0EPSS 0.003
CVE-2026-41724
VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)
Published 2026-06-08 · Analyzed
8.0EPSS 0.003
CVE-2025-41244
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
Published 2025-09-29 · Analyzed
7.8KEVEPSS 0.084
CVE-2024-38831
Local privilege escalation vulnerability (CVE-2024-38831)
Published 2024-11-26 · Analyzed
7.8EPSS 0.003
CVE-2024-38830
Local privilege escalation vulnerability
Published 2024-11-26 · Analyzed
7.8EPSS 0.002
CVE-2025-22222
VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)
Published 2025-01-30 · Analyzed
7.7EPSS 0.006
CVE-2026-22721
VMware Aria Operations privilege escalation vulnerability
Published 2026-02-25 · Analyzed
7.2EPSS 0.007
CVE-2024-38832
Stored cross-site scripting vulnerability (CVE-2024-38832)
Published 2024-11-26 · Analyzed
7.1EPSS 0.004
CVE-2024-38833
Stored cross-site scripting vulnerability (CVE-2024-38833)
Published 2024-11-26 · Analyzed
6.8EPSS 0.004
CVE-2023-20880
VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.
Published 2023-05-12 · Modified
6.7EPSS 0.002
CVE-2024-22235
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.
Published 2024-02-21 · Modified
6.7EPSS 0.002
CVE-2023-34043
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.
Published 2023-09-26 · Modified
6.7EPSS 0.002
CVE-2024-38834
Stored cross-site scripting vulnerability (CVE-2024-38834)
Published 2024-11-26 · Analyzed
6.5EPSS 0.003