HIGH🇵🇱 Wersja polska

CVE-2022-31707

CVSS 7.2v3.1pub. 2022-12-16upd. 2025-04-18

vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • VMware Vrealize Operations

    APP
    Vmware
    8.10.08.6.0 – 8.6.4.20823815 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2020-3943CRITICAL9.8PL ✓same product

VMware vRealize Operations – RCE przez niezabezpieczony JMX RMI

CVE-2016-7457CRITICAL10.0PL ✓same product

VMware vRealize Operations — eskalacja uprawnień i usunięcie maszyn wirtualnych

CVE-2023-20877HIGH8.8same product

VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with Rea...

CVE-2023-20878HIGH7.2same product

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privile...

CVE-2023-20856HIGH8.8same product

VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute action...