| Package | Affected versions | Patched versions |
|---|---|---|
| aria operations for logs | ≥ 8.0, < 8.18.3 | 8.18.3 |
| cloud foundation | ≥ 4.0, ≤ 5.2 |
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free