CVE-2024-47250

Summary

CVE-2024-38832 refers to a stored cross-site scripting (XSS) vulnerability in VMware Aria Operations. Malicious actors with editing access to views can exploit this flaw to inject malicious scripts, resulting in stored XSS attacks. Successful exploitation could lead to unintended execution of malicious code in a user's browser, potentially compromising sensitive data or gaining unauthorized access. VMware urges users to apply the available patch as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.