Vulnerabilities of VMware VMware Aria Automation
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-22249 | VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this… | 8.2 High | May 13, 2025 |
| CVE-2025-22215 | VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization… | 4.3 Medium | Jan 8, 2025 |
| CVE-2024-22280 | VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An… | 8.5 High | Jul 11, 2024 |