VMware Aria Operations For Logs
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in VMware Aria Operations For Logs.
By the Year
In 2025 there have been 4 vulnerabilities in VMware Aria Operations For Logs with an average score of 6.7 out of ten. Aria Operations For Logs did not have any published security vulnerabilities last year. That is, 4 more vulnerabilities have already been reported in 2025 as compared to last year.
Year | Vulnerabilities | Average Score |
---|---|---|
2025 | 4 | 6.73 |
2024 | 0 | 0.00 |
2023 | 4 | 8.65 |
2022 | 0 | 0.00 |
2021 | 0 | 0.00 |
2020 | 0 | 0.00 |
2019 | 0 | 0.00 |
2018 | 0 | 0.00 |
It may take a day or so for new Aria Operations For Logs vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent VMware Aria Operations For Logs Security Vulnerabilities
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability
CVE-2025-22221
4.8 - Medium
- January 30, 2025
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration.
VMware Aria Operations for Logs contains a privilege escalation vulnerability
CVE-2025-22220
5.4 - Medium
- January 30, 2025
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability
CVE-2025-22219
9 - Critical
- January 30, 2025
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations as admin user.
VMware Aria Operations for Logs contains an information disclosure vulnerability
CVE-2025-22218
7.7 - High
- January 30, 2025
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs
VMware Aria Operations for Logs contains a deserialization vulnerability
CVE-2023-34052
7.8 - High
- October 20, 2023
VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could result in authentication bypass.
Marshaling, Unmarshaling
VMware Aria Operations for Logs contains an authentication bypass vulnerability
CVE-2023-34051
9.8 - Critical
- October 20, 2023
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
AuthZ
VMware Aria Operations for Logs contains a command injection vulnerability
CVE-2023-20865
7.2 - High
- April 20, 2023
VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.
Command Injection
VMware Aria Operations for Logs contains a deserialization vulnerability
CVE-2023-20864
9.8 - Critical
- April 20, 2023
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.
Marshaling, Unmarshaling
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for VMware Aria Operations For Logs or by VMware? Click the Watch button to subscribe.
