Vmware VCF Operations vulnerabilities
4 vulnerabilities
Known vulnerabilities in Vmware VCF Operations, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-41244debianopen-vm-tools+61KEV
EPSS score8.44%
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.CVE-2026-41724vmwarearia_operations+5EPSS score0.32%
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.CVE-2026-41722vmwarearia_operations+6EPSS score0.32%
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.CVE-2026-41723vmwarearia_operations+6EPSS score0.42%
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.