CVE-2023-34051

9.8 criticalEPSS 48%

Critical (9.8) in vmware aria operations for logs. EPSS 48% chance of exploitation in the next 30 days.

VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 48% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-10-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:aria_operations_for_logs

References

https://www.vmware.com/security/advisories/VMSA-2023-0021.html
https://www.vmware.com/security/advisories/VMSA-2023-0021.html

Check your stack JSON