Filtered by vendor Vmware Subscriptions
Filtered by product Aria Operations For Logs Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-34052 1 Vmware 1 Aria Operations For Logs 2024-11-21 7.8 High
VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could result in authentication bypass.
CVE-2023-34051 1 Vmware 1 Aria Operations For Logs 2024-11-21 9.8 Critical
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
CVE-2023-20865 1 Vmware 2 Aria Operations For Logs, Cloud Foundation 2024-11-21 7.2 High
VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.
CVE-2023-20864 1 Vmware 2 Aria Operations For Logs, Cloud Foundation 2024-11-21 9.8 Critical
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.