CVE-2025-22221

Summary

CVE-2025-22221 is a stored cross-site scripting (XSS) vulnerability affecting VMware Aria Operations for Logs. An attacker with administrative privileges can exploit this flaw to inject malicious scripts into the application. During a delete action in the Agent Configuration, victims' browsers may execute the malicious code, leading to potential security breaches. Successful exploitation could result in unauthorized access or data theft. Users are urged to update their VMware Aria Operations for Logs installations as soon as patches become available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.