Vulnerabilities fixed in VMware Aria Operations

🗓️ 31 Jan 2025 12:25:21Reported by NCSCType

Vulnerabilities fixed in VMware Aria Operations include information leaks, stored script vulnerabilities, and privilege escalation; updates released.

Reporter	Title	Published	Views	Family All 54
ATTACKERKB	CVE-2025-22220	30 Jan 202516:15	–	attackerkb
BDU FSTEC	The vulnerability of VMware Aria Operations for Logs, a tool for analyzing network logs, stems from the lack of security measures taken to protect the website structure. This vulnerability allows attackers to inject and execute arbitrary code in users’ browsers, within the context of the vulnerable website.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool, related to insecure privilege management, allows an attacker to perform certain operations in the context of the administrative user.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool arises due to the lack of security measures taken to protect the website structure. This allows attackers to escalate their privileges and execute arbitrary code.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protection for service data, allows a perpetrator to disclose the protected information.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool lies in the insufficient protection of operational data, which allows an attacker to exploit this weakness to disclose protected information.	14 May 202500:00	–	bdu_fstec
Circl	CVE-2025-22218	30 Jan 202514:22	–	circl
Circl	CVE-2025-22219	30 Jan 202514:22	–	circl
Circl	CVE-2025-22220	30 Jan 202514:22	–	circl
Circl	CVE-2025-22221	30 Jan 202514:22	–	circl