Boletines de Vulnerabilidades

CVE-2025-22221

   
Software afectado VMWARE
 
VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-22221