Vulnerabilities

TI-2025-16132 CVE-2025-22221 · GHSA-qrcx-78jp-35gm

VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221)

LOW 24

VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability.

CVSS 3.1MEDIUM 5.2 Network High privileges User interaction EPSS 0.00391 Published 2025-01-30 Fixed in 8.18.3 CWE-79

TI-2025-16131 CVE-2025-22220 · GHSA-m777-hj92-cw6q

LOW 26

VMware Aria Operations for Logs contains a privilege escalation vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00322 Published 2025-01-30 Fixed in 8.18.3 CWE-269

TI-2025-16130 CVE-2025-22219 · GHSA-j5gv-mwmr-ppp5

MEDIUM 42

VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00661 Published 2025-01-30 Fixed in 8.18.3 CWE-79

TI-2025-16129 CVE-2025-22218 · GHSA-x379-p5q2-7954

MEDIUM 40

VMware Aria Operations for Logs contains an information disclosure vulnerability.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00661 Published 2025-01-30 Fixed in 8.18.3 CWE-209

TI-2023-16917 CVE-2023-34051 · GHSA-ghvx-5v39-7hv5

HIGH 79

VMware Aria Operations for Logs contains an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.48107 Published 2023-10-20 No fix listed CWE-863

TI-2023-16918 CVE-2023-34052 · GHSA-qrhv-m52g-wcw8

LOW 35

VMware Aria Operations for Logs contains a deserialization vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00217 Published 2023-10-20 No fix listed CWE-502

TI-2023-07284 CVE-2023-20865 · GHSA-3frw-92jp-g6w8

LOW 37

VMware Aria Operations for Logs contains a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0164 Published 2023-04-20 No fix listed CWE-77

TI-2023-07283 CVE-2023-20864 · GHSA-8xj6-cxx5-jf7j

CRITICAL 86

VMware Aria Operations for Logs contains a deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.70423 Published 2023-04-20 No fix listed CWE-502