Broadcom Patches VMware Aria Flaws – Exploits May Lead to Credential Theft

🗓️ 31 Jan 2025 05:49:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 23 Views

Broadcom patches VMware Aria flaws to prevent credential theft and unauthorized access risks.

Reporter	Title	Published	Views	Family All 90
ATTACKERKB	CVE-2025-22220	30 Jan 202516:15	–	attackerkb
BDU FSTEC	The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).	29 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).	29 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for managing traffic in hybrid and multi-cloud environments, such as VMware Avi Load Balancer, stems from insufficient measures taken to protect the SQL query structure. This allows attackers to gain access to the internal database.	30 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of VMware Aria Operations for Logs, a tool for analyzing network logs, stems from the lack of security measures taken to protect the website structure. This vulnerability allows attackers to inject and execute arbitrary code in users’ browsers, within the context of the vulnerable website.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool, related to insecure privilege management, allows an attacker to perform certain operations in the context of the administrative user.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool arises due to the lack of security measures taken to protect the website structure. This allows attackers to escalate their privileges and execute arbitrary code.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protection for service data, allows a perpetrator to disclose the protected information.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool lies in the insufficient protection of operational data, which allows an attacker to exploit this weakness to disclose protected information.	14 May 202500:00	–	bdu_fstec
Circl	CVE-2024-38832	26 Nov 202411:55	–	circl

31 Jan 2025 05:49Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.6

EPSS0.00662

SSVC

broadcom security update vmware aria operations credential theft xss attack api vulnerabilities malicious script.