Vrealize Operations vulnerabilities
6 known vulnerabilities in Vrealize Operations from VMware. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
VMware Aria Operations (formerly vRealize…: Deserialization of Untrusted Data
VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system.
- 8.8 High severity
VMware Aria Operations (formerly vRealize…: Incorrect Authorization
VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution leading to privilege escalation.
- 8.8 High severity
VMware vRealize Operations (vROps): Cross-Site Request Forgery
VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user.
- 7.2 High severity
VMware vRealize Operations (vROps): Improper Privilege Management
vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
- 8.8 High severity
VMware vRealize Operations: Exposure of Sensitive Information to an Unauthorized Actor
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
- 7.2 High severity
VMware vRealize Operations: Improper Privilege Management
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root.