VMware Vrealize Operations 8.6.3

CPE Details

VMware Vrealize Operations 8.6.3
vmware
vrealize_operations
8.6.3
2023-02-07
17h41 +00:00
2023-06-23
13h39 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:vmware:vrealize_operations:8.6.3:*:*:*:*:*:*:*

Informations

Vendor

vmware

Product

vrealize_operations

Version

8.6.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-20856 2023-02-01 00h00 +00:00 VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user.
8.8
High
CVE-2022-31707 2022-12-15 23h00 +00:00 vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
7.2
High
CVE-2022-31708 2022-12-15 23h00 +00:00 vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4.
4.9
Medium
CVE-2022-31682 2022-10-10 22h00 +00:00 VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data.
4.9
Medium
CVE-2022-31673 2022-08-09 18h19 +00:00 VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
8.8
High
CVE-2022-31674 2022-08-09 18h19 +00:00 VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure.
4.3
Medium
CVE-2022-31675 2022-08-09 18h19 +00:00 VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.
7.5
High
CVE-2022-31672 2022-08-09 18h18 +00:00 VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root.
7.2
High