CVE-2025-22215 | THREATINT

Description

VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization Member" access to Aria Automation may exploit this vulnerability enumerate internal services running on the host/network.

PUBLISHED Reserved 2025-01-02 | Published 2025-01-08 | Updated 2025-01-08 | Assigner vmware

MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Product status

Default status

unaffected

8.x (8.18.1 patch 1) before 8.18.1 patch 1

affected

Default status

unaffected

5.x (8.18.1 patch 1) before 8.18.1 patch 1

affected

4.x (8.18.1 patch 1) before 8.18.1 patch 1

affected

References

support.broadcom.com/...l/content/SecurityAdvisories/0/25312

cve.org (CVE-2025-22215)

nvd.nist.gov (CVE-2025-22215)

Download JSON