VMware VMware Aria Operations
15 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41724 | 8.18.x – 8.18.7 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-… | HIGH 8.0 | 0.3 % | ||
| CVE-2026-41723 | 8.18.x – 8.18.6 ; 8.18.x – 8.18.7 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-… | HIGH 8.0 | 0.4 % | ||
| CVE-2026-41722 | 8.18.x – 8.18.6 ; 8.18.x – 8.18.7 | VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-… | HIGH 8.0 | 0.3 % | ||
| CVE-2026-22721 | 8.18.0 – < 8.18.6 | VMware Aria Operations privilege escalation vulnerability | HIGH 7.2 | 0.7 % | ||
| CVE-2026-22720 | 8.18.0 – < 8.18.6 | VMware Aria Operations stored cross-site scripting vulnerability | CRITICAL 9.0 | 0.4 % | ||
| CVE-2026-22719 | 8.18.x – < 8.18.6 | VMware Aria Operations command injection vulnerability | HIGH 8.1 | 18 % | KEV | |
| CVE-2025-41245 | 8.18.x – < 8.18.5 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025… | MEDIUM 4.9 | 0.6 % | ||
| CVE-2025-41244 | 8.18.x – < 8.18.5 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025… | HIGH 7.8 | 8.6 % | KEV | |
| CVE-2025-22231 | 8.x – < 8.18 HF5 | VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-22222 | 8.x – < 8.18.3 | VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) | HIGH 7.7 | 0.6 % | ||
| CVE-2024-38834 | 8.x – < 8.18.2 | Stored cross-site scripting vulnerability (CVE-2024-38834) | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-38833 | 8.x – < 8.18.2 | Stored cross-site scripting vulnerability (CVE-2024-38833) | MEDIUM 6.8 | 0.4 % | ||
| CVE-2024-38832 | 8.x – < 8.18.2 | Stored cross-site scripting vulnerability (CVE-2024-38832) | HIGH 7.1 | 0.4 % | ||
| CVE-2024-38831 | 8.x – < 8.18.2 | Local privilege escalation vulnerability (CVE-2024-38831) | HIGH 7.8 | 0.3 % | ||
| CVE-2024-38830 | 8.x – < 8.18.2 | Local privilege escalation vulnerability | HIGH 7.8 | 0.2 % |