Aria Operations For Logs vulnerabilities
6 known vulnerabilities in Aria Operations For Logs from VMware. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.0 Critical severity
VMware Aria Operations for Logs: Improper Neutralization of Input During Web Page Generation
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations
- 7.7 High severity
VMware Aria Operations for Logs: Generation of Error Message Containing Sensitive Information
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs
- 7.8 High severity
VMware Aria Operations for Logs: Deserialization of Untrusted Data
VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could result in authentication bypass.
- 9.8 Critical severity
VMware Aria Operations for Logs: Incorrect Authorization
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
- 7.2 High severity
VMware Aria Operations for Logs (formerly…: Improper Neutralization of Special Elements used in a Command
VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.
- 9.8 Critical severity
VMware Aria Operations for Logs (formerly…: Deserialization of Untrusted Data
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.