Exploit / PoChigh

Broadcom fixed information disclosure flaws in VMware Aria Operations

Security Affairsby @securityaffairsJan 31, 2025 · 09:36 UTC (Jan 31, 2025)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-22218 CVE-2025-22219 CVE-2025-22220 CVE-2025-22221 CVE-2025-22222 CVE-2023-34051

Tags: cve-2025-22218 cve-2025-22219 cve-2025-22220 cve-2025-22221 cve-2025-22222 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2023-34051	VMware Aria Operations for Logs contains an authentication bypass vulnerability	9.8	45%	Oct 20, 2023
CVE-2025-22219 +3 related CVEs CVE-2025-22218 CVE-2025-22220 CVE-2025-22221	VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability	9.0 group max	<1%	Jan 30, 2025
CVE-2025-22222	VMware Aria Operations contains an information disclosure vulnerability	6.5	<1%	Jan 30, 2025

From the original article

2 min read at securityaffairs.com

Broadcom patched five flaws in VMware Aria Operations and Aria Operations for Logs that could lead to privilege escalation and credential theft. Broadcom addressed the following vulnerabilities in VMware Aria Operations and Aria Operations for Logs: CVE-2025-22218 (CVSS score 8. 5) is an information disclosure vulnerability in VMware Aria Operations for Logs.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.