VMware Aria Operations for Logs vulnerabilities

2 known vulnerabilities in VMware Aria Operations for Logs from VMware. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  VMware Aria Operations for Logs: Improper Neutralization of Input During Web Page Generation

  CVE-2025-22219Jan 30, 2025VMware

  VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script that (can perform stored cross-site scripting) may lead to arbitrary operations

• 7.7 High severity

  VMware Aria Operations for Logs: Generation of Error Message Containing Sensitive Information

  CVE-2025-22218Jan 30, 2025VMware

  VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs