CVE-2024-38833
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Published Nov 26, 2024
Updated: Dec 6, 2024
CWE ID 79
Summary
CVE-2024-38833 is a stored cross-site scripting vulnerability affecting VMware Aria Operations. An attacker with editing access to email templates can inject malicious scripts, which are then stored and executed on unsuspecting users' browsers. This issue poses a significant risk as the malicious code remains active even after the email has been viewed, potentially leading to unauthorized access or data theft. VMware strongly urges users to apply the available patch as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.