4.3
Medium
CVE-2025-22220 VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative…
Description
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations for Logs 8 | 8.x → < 8.18.3 | 8.18.3 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware Aria Operations for Logs
The 4 CVEs of VMware Aria Operations for Logs →
CVE-2025-22221
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin…
5.2
Medium
CVE-2025-22219
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with…
6.8
Medium
CVE-2025-22218
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin…
8.5
High