VA
Product
VMware Aria operations
On CISA KEVExploited in the wild
15
CVEs
2
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 7Low 0
Watch
Add VMware Aria operations to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-22222 | 6.5 | Jan 30 | VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) Affected: 8.x before 8.18.3 |
| CVE-2024-38832 | 6.4 | Nov 26 | Stored cross-site scripting vulnerability (CVE-2024-38832) Affected: 8.x before 8.18.2 |
| CVE-2026-41724 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.18.x through 8.18.7 |
| CVE-2026-41722 | 5.4 | Jun 8 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724) Affected: 8.18.x through 8.18.6; 8.18.x through 8.18.7 |
| CVE-2024-38833 | 5.4 | Nov 26 | Stored cross-site scripting vulnerability (CVE-2024-38833) Affected: 8.x before 8.18.2 |
| CVE-2025-41245 | 4.9 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) Affected: 8.18.x before 8.18.5 |
| CVE-2024-38834 | 4.8 | Nov 26 | Stored cross-site scripting vulnerability (CVE-2024-38834) Affected: 8.x before 8.18.2 |
Showing 7
