4.9
Medium
CVE-2025-41245 VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative…
Description
VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations 8.18 | 8.18.x → < 8.18.5 | 8.18.5 |
| VMware Cloud Foundation 5 | 5.x → < 8.18.5 | 8.18.5 |
| VMware Cloud Foundation 4 | 4.x → < 8.18.5 | 8.18.5 |
| VMware Telco Cloud Platform 5 | 5.x → < 8.18.5 | 8.18.5 |
| VMware Telco Cloud Platform 4 | 4.x → < 8.18.5 | 8.18.5 |
| VMware Telco Cloud Infrastructure 3 | 3.x → < 8.18.5 | 8.18.5 |
| VMware Telco Cloud Infrastructure 2 | 2.x → < 8.18.5 | 8.18.5 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware Aria Operations
The 15 CVEs of VMware Aria Operations →
CVE-2026-41724
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41723
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41722
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-22721
VMware Aria Operations contains a privilege escalation vulnerability
6.2
Medium