Advisories · Technology

Vmware Aria Automation.

Every CVE that names Vmware Aria Automation among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-22249 CVE record

CVSS 8.2 High

VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)
- Vmware Aria Automation
- VMware Cloud Foundation
- Cross-site scripting (XSS)
Not analysed yet 13 May 2025
CVE-2025-22215 CVE record

CVSS 4.3 Medium

VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)
- VMware Aria Automation
- VMware Cloud Foundation (VMware Aria Automation)
- Server-side request forgery (SSRF)
Not analysed yet 8 Jan 2025
CVE-2024-22280 CVE record

CVSS 8.5 High

VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)
- VMware Aria Automation
- SQL injection
Not analysed yet 11 Jul 2024