6.4
Medium
CVE-2024-22238 Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges…
Description
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations for Networks | Versions not published |
Other CVEs of VMware Aria Operations for Networks
The 5 CVEs of VMware Aria Operations for Networks →
CVE-2024-22241
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges…
4.3
Medium
CVE-2024-22240
Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may…
4.9
Medium
CVE-2024-22239
Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria…
5.3
Medium
CVE-2024-22237
Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria…
7.8
High