Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-20	CVE-2023-34051	Incorrect Authorization vulnerability in VMWare Aria Operations for Logs VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. network low complexity vmware CWE-863 critical	9.8
2023-04-20	CVE-2023-20864	Deserialization of Untrusted Data vulnerability in VMWare Aria Operations for Logs and Cloud Foundation VMware Aria Operations for Logs contains a deserialization vulnerability. network low complexity vmware CWE-502 critical	9.8