Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2024-22238

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configura

Description

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a VMware Aria Operations for Networks

Default version status: unaffected

  • VMware Aria Operations for Networks 6.xaffected

References