Lucene search
+L

412 matches found

CNNVD
CNNVD
added 2024/11/26 12:00 a.m.8 views

VMware Aria Operations 安全漏洞

VMware Aria Operations is a unified, AI-driven, autopilot IT operations management platform for private, hybrid, and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations that stems from a local elevation of privilege issue that allows a malicious...

7.8CVSS6.6AI score0.00178EPSS
SaveExploits0References1
VMware
VMware
added 2024/05/08 12:00 a.m.56 views

VMSA-2024-0004:VMware Aria Operations updates address local privilege escalation vulnerability (CVE-2024-22235)

Advisory ID: | VMSA-2024-0004 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 6.7 Synopsis: | VMware Aria Operations updates address local privilege escalation vulnerability. CVE-2024-22235 Issue date: | 2024-02-20 Updated on: | 2024-02-20 Initial Advisory CVEs | CVE-2024-22235 1. Impacted...

6.7CVSS7AI score0.00194EPSS
SaveExploits0References13Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/02/29 12:00 a.m.10 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to deficiencies in access control, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

6.7CVSS6.6AI score0.00194EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/02/22 12:00 a.m.34 views

VMWare Aria Operations < 8.16 PrivEsc (VMSA-2024-0004)

According to its self-reported version, the instance of VMWare Aria Operations formerly vRealize Operations running on the remote web server is 8.16.0.23251571. It is, therefore, affected by the following: - VMware Aria Operations contains a local privilege escalation vulnerability. A malicious...

6.7CVSS6.6AI score0.00194EPSS
SaveExploits0References4
NVD
NVD
added 2024/02/21 5:15 a.m.29 views

CVE-2024-22235

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'...

6.7CVSS6.8AI score0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/21 5:15 a.m.5 views

CVE-2024-22235

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'...

6.7CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/21 5:15 a.m.20 views

Privilege escalation

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'...

4CVSS7.5AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/21 4:59 a.m.37 views

CVE-2024-22235

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'...

6.7CVSS7.1AI score0.00194EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/21 4:59 a.m.138 views

CVE-2024-22235

CVE-2024-22235 affects VMware Aria Operations (formerly vRealize Operations) and VMware Aria Operations in VMware Cloud Foundation. The issue is a local privilege escalation: a malicious actor with administrative access to the local system can escalate to root. The CVSSv3 base score is 6.7 (Local...

6.7CVSS6.8AI score0.00194EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/02/21 4:59 a.m.11 views

CVE-2024-22235

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'...

6.7CVSS7.2AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/21 12:00 a.m.11 views

VMware Aria Operations Security Vulnerability

VMware Aria Operations is a unified, AI-driven, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations, which stems from a contained local elevation of privilege vulnerability that...

6.7CVSS7AI score0.00194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.15 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to errors in privilege management, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for VMware Aria Operations is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.4AI score0.00214EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.14 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

4.8CVSS5.6AI score0.37849EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.11 views

The vulnerability of the monitoring tool for VMware Aria Operations lies in the use of files and directories accessible from external parties, allowing a perpetrator to gain unauthorized access to protected information.

The vulnerability of the monitoring tool for VMware Aria Operations relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.1CVSS5.9AI score0.00615EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.14 views

The vulnerability of the monitoring tool for VMware Aria Operations lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.7CVSS6.3AI score0.00498EPSS
SaveExploits0References3Affected Software1
NCSC
NCSC
added 2024/02/08 12:00 a.m.11 views

Vulnerabilities fixed in VMware Aria Operations Networks

VMWare has fixed vulnerabilities in Aria Operations Networks, formerly known as vRealize Network Insight. A malicious party could exploit the vulnerabilities to gain access to sensitive data, to elevate privileges or to launch a Cross-Site Scripting XSS attack. The vulnerability marked...

7.8CVSS6.7AI score0.37849EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:00 a.m.64 views

VMWare Aria Operations for Networks 6.x < 6.12 Multiple Vulnerabilities (VMSA-2024-0002)

According to its self-reported version, the instance of VMWare Aria Operations for Networks running on the remote web server is 6.x 6.12.0.1706185032. It is, therefore, affected by multiple vulnerabilities: - Aria Operations for Networks contains a local privilege escalation vulnerability. A...

7.8CVSS5.9AI score0.37849EPSS
SaveExploits0References8
CISA
CISA
added 2024/02/07 12:00 p.m.5 views

VMware Releases Security Advisory for Aria Operations for Networks

VMware released a security advisory to address multiple vulnerabilities in Aria Operations for Networks. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware security advisory...

7.6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/02/07 12:00 a.m.15 views

The vulnerability of the network and application monitoring tool in VMware Aria Operations for Networks, due to deficiencies in access control, allows a malicious actor to elevate their privileges to the root user level.

The vulnerability of the network and application monitoring tool in VMware Aria Operations for Networks is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the level of a root user...

7.8CVSS7.4AI score0.00246EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/02/06 8:16 p.m.7 views

CVE-2024-22241

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious payload into the login banner and takeover the user account...

4.8CVSS5.3AI score
SaveExploits0References1
Rows per page
Query Builder