VMware Aria Operations vulnerabilities

16 CVEs affecting VMware Aria Operations, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-41724, published 2026-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability, published 2026-02-25. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2026-03-03. EPSS: 18.1% chance of exploitation in the next 30 days. VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in…
CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability, published 2025-09-29. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2025-10-30. EPSS: 8.4% chance of exploitation in the next 30 days. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware…
CVE-2026-22721, published 2026-02-25. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative…
CVE-2025-22222, published 2025-01-30. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound…
CVE-2024-38832, published 2024-11-26. Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to views may be able to inject malicious script leading to stored cross-site…
CVE-2026-22720, published 2026-02-25. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative…
CVE-2026-41723, published 2026-06-08. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…
CVE-2024-38833, published 2024-11-26. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious script leading to stored cross-site…
CVE-2026-41724, published 2026-06-08. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…
CVE-2026-41722, published 2026-06-08. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject…

Latest

CVE-2024-38834, published 2024-11-26. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cloud provider might be able to inject malicious script leading to stored…