medium6.4
CVE-2024-22238
Aria Operations for Networks contains a cross site scripting vulnerability.
Impact
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Operations For Networks | from 6.0.0 through 6.12.0 |