CVE-2025-22220

5.4 mediumEPSS 0.3%

Medium (5.4) in vmware. EPSS 0.3% chance of exploitation in the next 30 days.

VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2025-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:aria_operations_for_logs
vmware:cloud_foundation

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329

Check your stack JSON