BROADCOM has announced critical patches for its VMware Cloud Foundation due to multiple stored XSS vulnerabilities found in its management applications, affecting systems like VMware Aria Operations and VMware Telco Cloud Platform. The vulnerabilities, rated with a maximum CVSS score of 8.0, allow malicious actors to inject scripts, posing significant risks to corporate data. Organizations are advised to urgently apply the necessary firmware updates to mitigate these risks. The advisory highlights the importance of proactive patch management to safeguard against such security threats.
Broadcom patches VMware Cloud Foundation XSS bugs after alert
CyberSIXT Evidence Panel
Primary Source
support.broadcom.com
Article by CyberSIXT