6.8
Medium
CVE-2024-38833 VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to…
Description
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious script leading to stored cross-site scripting in the product VMware Aria Operations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations 8 | 8.x → < 8.18.2 | 8.18.2 |
Other CVEs of VMware Aria Operations
The 15 CVEs of VMware Aria Operations →
CVE-2026-41724
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41723
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41722
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-22721
VMware Aria Operations contains a privilege escalation vulnerability
6.2
Medium