Vulnerabilities

TI-2025-16132 CVE-2025-22221 · GHSA-qrcx-78jp-35gm

VMware Aria Operations for Logs stored cross-site scripting vulnerability (CVE-2025-22221)

LOW 24

VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability.

CVSS 3.1MEDIUM 5.2 Network High privileges User interaction EPSS 0.00391 Published 2025-01-30 Fixed in 8.18.3 CWE-79

TI-2025-16131 CVE-2025-22220 · GHSA-m777-hj92-cw6q

LOW 26

VMware Aria Operations for Logs contains a privilege escalation vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00322 Published 2025-01-30 Fixed in 8.18.3 CWE-269

TI-2025-16130 CVE-2025-22219 · GHSA-j5gv-mwmr-ppp5

MEDIUM 42

VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00661 Published 2025-01-30 Fixed in 8.18.3 CWE-79

TI-2025-16129 CVE-2025-22218 · GHSA-x379-p5q2-7954

MEDIUM 40

VMware Aria Operations for Logs contains an information disclosure vulnerability.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00661 Published 2025-01-30 Fixed in 8.18.3 CWE-209