Broadcom Patches VMware Aria Flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-38832+1 related CVE | VMware Aria Operations contains a stored cross-site scripting vulnerability | 6.4 group max | <1% | ||
| CVE-2025-22217 | Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware | 8.6 | <1% | ||
CVE-2025-22219+3 related CVEs | VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability | 9.0 group max | <1% | ||
| CVE-2025-22222 | VMware Aria Operations contains an information disclosure vulnerability | 6.5 | <1% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jan 31, 2025 Vulnerability / Data Security Broadcom has released security updates to patch five security flaws impacting VMware Aria Operations and Aria Operations for Logs, warning customers that attackers could exploit them to gain elevated access or obtain sensitive information. The list of identified flaws, which impact versions 8. x of the software, is below -
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.