CVE-2022-31682: VMware vRealize Operations

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data.

Affected products

• VMware vRealize Operations: from 8.0, before 8.10 (fixed in 8.10)

Published 2022-10-11. Last modified 2026-06-17.