Lucene search
HistoryFeb 06, 2024 - 8:16 p.m.
CVE-2024-22238
aria operations
networks
xss
vulnerability
injection
user profile configurations
improper input sanitization
malicious actor
admin privileges
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.8%
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization.
Affected configurations
Node
vmwarearia_operations_for_networksRange6.0.0–6.12.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vmware | aria_operations_for_networks | * | cpe:2.3:a:vmware:aria_operations_for_networks:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2024-02-06 20:16:00
cve
cve
CVE-2024-22238
2024-02-06 20:16:03
cvelist
cvelist
CVE-2024-22238
2024-02-06 19:37:08
vulnrichment
vulnrichment
CVE-2024-22238
2024-02-06 19:37:08
vmware
vmware
nessus
nessus
thn
thn
Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products
2024-02-08 05:10:00
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.8%
Related for NVD:CVE-2024-22238