⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [3 February]
60
CVE-2025-22217
—CVSS 3.1
8.6 high
EPSS
<1%p50
Published
()
Modified
Description
Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulnerability in affected VMware products. A malicious user with network access may be able to use specially crafted SQL queries to gain database access.
- Weakness
- CWE-89
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
In the news4 stories
Broadcom Patches VMware Aria Flaws
60
47
35