5.2
Medium
CVE-2025-22221 VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin…
Description
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations for Logs 8 | 8.x → < 8.18.3 | 8.18.3 |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware Aria Operations for Logs
The 4 CVEs of VMware Aria Operations for Logs →
CVE-2025-22220
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative…
4.3
Medium
CVE-2025-22219
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with…
6.8
Medium
CVE-2025-22218
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin…
8.5
High