Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-38833

Stored cross-site scripting vulnerability (CVE-2024-38833)

Description

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to email templates might inject malicious script leading to stored cross-site scripting in the product VMware Aria Operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware Aria Operations

Default version status: unaffected

  • 8.x to < 8.18.2affected

References