7.7
High
CVE-2025-22222 VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative…
Description
VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plugin if a valid service credential ID is known.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations 8 | 8.x → < 8.18.3 | 8.18.3 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware Aria Operations
The 15 CVEs of VMware Aria Operations →
CVE-2026-41724
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41723
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-41722
VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor…
8.0
High
CVE-2026-22721
VMware Aria Operations contains a privilege escalation vulnerability
6.2
Medium