4.3
Medium
CVE-2025-22215 VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization…
Description
VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization Member" access to Aria Automation may exploit this vulnerability enumerate internal services running on the host/network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Automation 8 | 8.x → latest | No fix stated |
| VMware Cloud Foundation (VMware Aria Automation) 5 | 5.x → latest | No fix stated |
| VMware Cloud Foundation (VMware Aria Automation) 4 | 4.x → latest | No fix stated |