medium4.3
CVE-2024-22241
Aria Operations for Networks contains a cross site scripting vulnerability.
Impact
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious payload into the login banner and takeover the user account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Operations For Networks | from 6.0.0 through 6.12.0 |