VMSA-2025-0003: VMware Aria Operations for Logs and VMware Aria Operations updates address multiple vulnerabilities (CVE-2025-22218, CVE-2025-22219, CVE-2025-22220, CVE-2025-22221 and CVE-2025-22222)

🗓️ 30 Jan 2025 00:00:00Reported by VMwareType

vmware

vmware🔗 support.broadcom.com👁 39 Views

VMware Aria Operations vulnerabilities addressed in updates (CVE-2025-22218 to CVE-2025-22222).

Reporter	Title	Published	Views	Family All 56
ATTACKERKB	CVE-2025-22220	30 Jan 202516:15	–	attackerkb
BDU FSTEC	The vulnerability of VMware Aria Operations for Logs, a tool for analyzing network logs, stems from the lack of security measures taken to protect the website structure. This vulnerability allows attackers to inject and execute arbitrary code in users’ browsers, within the context of the vulnerable website.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool, related to insecure privilege management, allows an attacker to perform certain operations in the context of the administrative user.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool arises due to the lack of security measures taken to protect the website structure. This allows attackers to escalate their privileges and execute arbitrary code.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protection for service data, allows a perpetrator to disclose the protected information.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool lies in the insufficient protection of operational data, which allows an attacker to exploit this weakness to disclose protected information.	14 May 202500:00	–	bdu_fstec
Circl	CVE-2025-22218	30 Jan 202514:22	–	circl
Circl	CVE-2025-22219	30 Jan 202514:22	–	circl
Circl	CVE-2025-22220	30 Jan 202514:22	–	circl
Circl	CVE-2025-22221	30 Jan 202514:22	–	circl

Vulners

Node

vmware aria_operations_for_logsRange<8.18.3

OR

vmware aria_operationsRange<8.18.3

Source	Link
vmware	www.vmware.com/support/policies/security_response.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
blogs	www.blogs.vmware.com/security
x	www.x.com/VMwareSRC

14 Feb 2025 09:27Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.5 - 9

EPSS0.00647

SSVC

vmware aria operations cve-2025-22218 cve-2025-22219 cve-2025-22220 cve-2025-22221 cve-2025-22222 logs vulnerabilities information disclosure advisory vmsa-2025-0003.