Cross site scripting

2024-02-0620:16:00

PRIOn knowledge base

www.prio-n.com

xss

aria operations

networks

admin privilege

takeover

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious payload into the login banner and takeover the user account.

CPENameOperatorVersion
aria_operations_for_networksge6.0.0
aria_operations_for_networksle6.12.0

CPE	Name	Operator	Version
	aria_operations_for_networks	ge	6.0.0
	aria_operations_for_networks	le	6.12.0

References

www.vmware.com/security/advisories/VMSA-2024-0002.html