CVE-2024-22238: VMware Aria Operations for Networks

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization.

Affected products

• VMware Aria Operations for Networks: from 6.0.0, up to and including 6.12.0

Published 2024-02-06. Last modified 2026-06-17.