VMware has released security update to address the multiple vulnerabilities in VMware vRealize Operations, the most serious of which might lead to Remote Code Execution.

The product vRealize Operations is an IT management tool. It is utilized for visibility, optimization, and management of physical, virtual, and cloud infrastructures.

The most serious of these flaws might enable the attacker to execute code within the context of the application. An attacker may then install programs, view, modify, or delete data depending on the permissions associated with the application that was using the exploit.

There are no reports of these flaws being used in the wild right now.

Table 1: Vulnerability details  

                                                                               Table 2: Vulnerable versions