DeutschShown in its original language — a full translation is planned for a future version.
VMware Aria Operations: Mehrere Schwachstellen
view advisory published 2024-11-26
Ein lokaler Angreifer kann mehrere Schwachstellen in VMware Aria Operations ausnutzen, um seine Privilegien zu erhöhen und einen Cross-Site-Scripting-Angriff durchzuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-38834US | medium4.8 | — | ||
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cloud provider might be able to inject malicious script leadin… | ||||
| CVE-2024-38833US | medium5.4 | — | ||
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious script leading to store… | ||||
| CVE-2024-38832US | medium6.4 | — | ||
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to views may be able to inject malicious script leading to stored… | ||||
| CVE-2024-38831US | high7.8 | — | ||
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious commands into the propertie… | ||||
| CVE-2024-38830US | high7.8 | — | ||
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may trigger this vulnerability to escalate privil… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan