Anshul Ola

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations (affected versions not specified) Description: The issue is related to a stored cross-site scripting vulnerability in VMware Aria Operations. This vulnerability can be exploited by a malicious actor with editing access to the cloud provider, allowing them to inject malicious scripts that lead to stored cross-site scripting in the product. The exploitation of this issue may enable a remote attacker to perform cross-site scripting attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.