Aria Operations
Vendor:
First CVE: May 12, 2023 · Active for 3 years
16
Total CVEs
More Total CVEs than 92% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
12.5%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Aria Operations over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 12, 2023
3 years ago
Most Recent CVE
Jun 8, 2026
46 days ago
CVE Severity & Scoring
Aria Operations16 CVEs
56%
38%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local6 (37.5%)
Network10 (62.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (93.8%)
High1 (6.3%)
Unknown0 (0.0%)
User Interaction
None10 (62.5%)
Unknown0 (0.0%)
Required6 (37.5%)
Privileges Required
Low10 (62.5%)
High5 (31.3%)
None1 (6.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-22719HIGH VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote c | Feb 25, 2026 | 8.1 | 81 | YES | NO |
CVE-2025-41244HIGH VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VM | Sep 29, 2025 | 7.8 | 73 | YES | NO |
CVE-2026-41723HIGH VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be | Jun 8, 2026 | 8.0 | 37 | NO | NO |
CVE-2026-22720CRITICAL VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform a | Feb 25, 2026 | 9.0 | 31 | NO | NO |
CVE-2026-41724MEDIUM VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be | Jun 8, 2026 | 5.4 | 30 | NO | NO |
CVE-2026-41722MEDIUM VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be | Jun 8, 2026 | 5.4 | 30 | NO | NO |
CVE-2026-22721HIGH VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obta | Feb 25, 2026 | 7.2 | 28 | NO | NO |
CVE-2024-38831HIGH VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious commands into the propertie | Nov 26, 2024 | 7.8 | 26 | NO | NO |
CVE-2024-38830HIGH VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may trigger this vulnerability to escalate privil | Nov 26, 2024 | 7.8 | 23 | NO | NO |
CVE-2023-20880MEDIUM VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'. | May 12, 2023 | 6.7 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
2 CVEs
12.5% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Aria Operations
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.6.0 | 1 | 6.7 | 0.2% | 0 | 0 |
| 8.12.0 | 1 | 6.7 | 0.2% | 0 | 0 |
| 8.10.0 | 1 | 6.7 | 0.2% | 0 | 0 |