Vulnerabilities > Vmware > Aria Operations FOR Logs > 8.10

DATE CVE VULNERABILITY TITLE RISK
2023-10-20 CVE-2023-34051 Incorrect Authorization vulnerability in VMWare Aria Operations for Logs
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
network
low complexity
vmware CWE-863
critical
 9.8
9.8
2023-04-20 CVE-2023-20865 Command Injection vulnerability in VMWare Aria Operations for Logs and Cloud Foundation
VMware Aria Operations for Logs contains a command injection vulnerability.
network
low complexity
vmware CWE-77
7.2
7.2