AO
Product
Aria Operations
On CISA KEVExploited in the wild
16
CVEs
2
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 9Low 0
Watch
Add Aria Operations to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22235 | 6.7 | Feb 21 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root' Affected: 8.6.0 before 8.16.0 |
| CVE-2023-34043 | 6.7 | Sep 27 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root' Affected: 8.6.0; 8.10.0; 8.12.0; 8.12.0; 8.12.0; 8.12.0 |
| CVE-2023-20880 | 6.7 | May 12 | VMware Aria Operations contains a privilege escalation vulnerability Affected: 8.6.0 before 8.12.0 |
| CVE-2025-22222 | 6.5 | Jan 30 | VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) Affected: 8.0 before 8.18.3 |
| CVE-2024-38832 | 6.4 | Nov 26 | Stored cross-site scripting vulnerability (CVE-2024-38832) Affected: 8.0 before 8.18.2 |
| CVE-2026-41724 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.0 before 8.18.7 |
| CVE-2026-41722 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.0 before 8.18.7 |
| CVE-2024-38833 | 5.4 | Nov 26 | Stored cross-site scripting vulnerability (CVE-2024-38833) Affected: 8.0 before 8.18.2 |
| CVE-2024-38834 | 4.8 | Nov 26 | Stored cross-site scripting vulnerability (CVE-2024-38834) Affected: 8.0 before 8.18.2 |
Showing 9
