Vulnerability Details CVE-2026-22720
VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations.
To remediate CVE-2026-22720, apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' of VMSA-2026-0001 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947https:// .
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.8%
CVSS Severity
CVSS v3 Score 8.0
Products affected by CVE-2026-22720
-
cpe:2.3:a:vmware:aria_operations:8.0
-
cpe:2.3:a:vmware:aria_operations:8.10.0
-
cpe:2.3:a:vmware:aria_operations:8.12.0
-
cpe:2.3:a:vmware:aria_operations:8.14.0
-
cpe:2.3:a:vmware:aria_operations:8.14.1
-
cpe:2.3:a:vmware:aria_operations:8.16.0
-
cpe:2.3:a:vmware:aria_operations:8.16.1
-
cpe:2.3:a:vmware:aria_operations:8.17.1
-
cpe:2.3:a:vmware:aria_operations:8.17.2
-
cpe:2.3:a:vmware:aria_operations:8.18
-
cpe:2.3:a:vmware:aria_operations:8.18.1
-
cpe:2.3:a:vmware:aria_operations:8.18.2
-
cpe:2.3:a:vmware:aria_operations:8.18.3
-
cpe:2.3:a:vmware:aria_operations:8.18.4
-
cpe:2.3:a:vmware:aria_operations:8.18.5
-
cpe:2.3:a:vmware:aria_operations:8.6.0
-
cpe:2.3:a:vmware:cloud_foundation:4.0
-
cpe:2.3:a:vmware:cloud_foundation:4.0.1
-
cpe:2.3:a:vmware:cloud_foundation:4.1
-
cpe:2.3:a:vmware:cloud_foundation:4.1.0.1
-
cpe:2.3:a:vmware:cloud_foundation:4.2
-
cpe:2.3:a:vmware:cloud_foundation:4.2.1
-
cpe:2.3:a:vmware:cloud_foundation:4.3
-
cpe:2.3:a:vmware:cloud_foundation:4.3.1
-
cpe:2.3:a:vmware:cloud_foundation:4.3.11
-
cpe:2.3:a:vmware:cloud_foundation:4.4
-
cpe:2.3:a:vmware:cloud_foundation:4.4.1
-
cpe:2.3:a:vmware:cloud_foundation:4.4.1.1
-
cpe:2.3:a:vmware:cloud_foundation:4.5
-
cpe:2.3:a:vmware:cloud_foundation:4.5.1
-
cpe:2.3:a:vmware:cloud_foundation:4.5.2
-
cpe:2.3:a:vmware:cloud_foundation:5.0
-
cpe:2.3:a:vmware:cloud_foundation:5.1
-
cpe:2.3:a:vmware:cloud_foundation:5.1.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1.1
-
cpe:2.3:a:vmware:cloud_foundation:5.2.1.2
-
cpe:2.3:a:vmware:cloud_foundation:5.2.2
-
cpe:2.3:a:vmware:cloud_foundation:9.0
-
cpe:2.3:a:vmware:cloud_foundation:9.0.1.0
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:2.2
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:2.5
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:2.7
-
cpe:2.3:a:vmware:telco_cloud_infrastructure:3.0
-
cpe:2.3:a:vmware:telco_cloud_platform:4.0
-
cpe:2.3:a:vmware:telco_cloud_platform:4.0.1
-
cpe:2.3:a:vmware:telco_cloud_platform:5.0
-
cpe:2.3:a:vmware:telco_cloud_platform:5.0.1