VMware Aria Operations for Logs (formerly vRealize Log Insight) vulnerabilities
We track 2 vulnerabilities in VMware Aria Operations for Logs (formerly vRealize Log Insight) products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 20, 2023.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest VMware Aria Operations for Logs (formerly vRealize Log Insight) vulnerabilities
- 7.2 High severity
VMware Aria Operations for Logs (formerly…: Improper Neutralization of Special Elements used in a Command
VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.
- 9.8 Critical severity
VMware Aria Operations for Logs (formerly…: Deserialization of Untrusted Data
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.