| Package | Affected versions | Patched versions |
|---|---|---|
| aria operations for logs | ≥ 8.0, < 8.18.3 | 8.18.3 |
| cloud foundation | ≥ 4.0, ≤ 5.2 |
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations as admin user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free