VMware vRealize Operations (vROps) vulnerabilities
We track 2 vulnerabilities in VMware vRealize Operations (vROps) products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 1, 2023.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest VMware vRealize Operations (vROps) vulnerabilities
- 8.8 High severity
VMware vRealize Operations (vROps): Cross-Site Request Forgery
VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user.
- 7.2 High severity
VMware vRealize Operations (vROps): Improper Privilege Management
vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.