CVE-2025-22249

🗓️ 13 May 2025 06:15:36Reported by [email protected]Type

VMware Aria automation has a Cross-Site Scripting vulnerability allowing token theft via malicious URL.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the VMware Aria Automation (previously vRealize Automation) software, a virtualization platform from VMware Cloud Foundation, and the VMware Telco Cloud Platform, a telecommunications cloud platform, stems from the lack of security measures for the website structure. This allows attackers to perform cross-site scripting attacks (XSS).	21 May 202500:00	–	bdu_fstec
Circl	CVE-2025-22249	13 May 202505:30	–	circl
CNNVD	VMware Aria Automation 安全漏洞	13 May 202500:00	–	cnnvd
CVE	CVE-2025-22249	13 May 202505:08	–	cve
Cvelist	CVE-2025-22249 VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)	13 May 202505:08	–	cvelist
EUVD	EUVD-2025-14367	3 Oct 202520:07	–	euvd
Positive Technologies	PT-2025-20732 · Vmware · Vmware Aria Automation	12 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-22249	15 May 202506:13	–	redhatcve
The Hacker News	⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More	19 May 202510:00	–	thn
VMware	VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)	12 May 202500:00	–	vmware