Beveiligingsadvies

CVE-2025-22249

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-13 05:08:03

Laatst bijgewerkt 2025-05-13 13:49:59

Toegewezen door vmware

CVSS-score 8.2

Status PUBLISHED

Beschrijving

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.

← Alle CVE's bekijken Bekijk op cve.org ↗