CVE-2026-41722

5.4 Moyenne

Publiée le 08/06/2026 à 11:16 · Modifiée le 23/07/2026 à 09:10 · Analysée par le NVD · Source : security@vmware.com

Description

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Foundation Operations.

Traduire en français

Produits concernés

VMware VCF operations
VMware Aria Operations
VMware Telco Cloud Platform
Vmware cloud foundation
Vmware vsphere

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.0 Élevée	security@vmware.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H`
3.1	5.4 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37513 Third Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories