Boletines de Vulnerabilidades

CVE-2025-22219

   
Software afectado VMWARE
 
VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations as admin user.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-22219