Multiple vulnerabilities in Aria Operations for Networks were responsibly reported to VMware. Updates are available to remediate these vulnerabilities.

CVE-2024-22237:
Local Privilege Escalation vulnerability
 

CVE-2024-22238:
Cross Site Scripting Vulnerability

CVE-2024-22239:
Local Privilege Escalation vulnerability

CVE-2024-22240:
Local File Read vulnerability

CVE-2024-22241:
Cross Site Scripting vulnerability 


These vulnerabilities and their impacts on Aria Operations for Networks are documented in the following VMware Security Advisory (VMSA), please review this document before continuing:
https://www.vmware.com/security/advisories/VMSA-2024-0002.html

To mitigate the vulnerability, VMware highly recommends upgrading to Aria Operations for Networks version 6.12.0
For more details on refer to VMware Security Advisory (VMSA): https://www.vmware.com/security/advisories/VMSA-2024-0002.html