CVE-2024-22241: VMware Aria Operations for Networks

Medium severity, CVSS 4.8. EPSS: 37.8% chance of exploitation in the next 30 days.

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious payload into the login banner and takeover the user account.  

Affected products

• VMware Aria Operations for Networks: from 6.0.0, up to and including 6.12.0

Published 2024-02-06. Last modified 2026-06-17.