NCSC-2025-0037

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in VMware Aria Operations

view advisory published 2025-01-31

VMware heeft kwetsbaarheden verholpen in VMware Aria Operations.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2025-22222USmedium6.5—
VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials…
CVE-2025-22221USmedium4.8—
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to injec…
CVE-2025-22220USmedium5.4—
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs A…
CVE-2025-22219UScritical9.0—
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script…
CVE-2025-22218UShigh7.7—
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan