6.8
Medium
CVE-2025-22219 VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with…
Description
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations as admin user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations for Logs 8 | 8.x → < 8.18.3 | 8.18.3 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware Aria Operations for Logs
The 4 CVEs of VMware Aria Operations for Logs →
CVE-2025-22221
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin…
5.2
Medium
CVE-2025-22220
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative…
4.3
Medium
CVE-2025-22218
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin…
8.5
High