VMware Aria Operations for Logs
Moderate fix1 remedy
cpe:2.3:a:vmware:aria_operations_for_logs:*:*:*:*:*:*:*
Moderate fix1 remedy
- ~8
VMware Aria Operations for Logs Stored Cross-Site Scripting Vulnerability
Vulnerability
Patched
A stored cross-site scripting vulnerability has been identified in VMware Aria Operations for Logs. This vulnerability allows a malicious actor with admin privileges to inject a script that could be executed in the browser of a victim performing a delete action in the Agent Configuration.
Impact
Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.
Remediation
To address this vulnerability, users should apply the patch available in VMware Aria Operations for Logs version 8.18.3.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.0impact
5.4exploitability
4.3remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.