Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-22222

VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)

Description

VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plugin if a valid service credential ID is known.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware Aria Operations

Default version status: unaffected

  • 8.x to < 8.18.3affected

References