[CVE-2026-41724] VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A m…

Descripción técnica

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Puntuación CVSS

Score: 8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Aria operations, Cloud foundation, Telco cloud platform — Vmware

Debilidades (CWE)

CWE-79

Fuente oficial

Publicado en NIST NVD.