VMware VMware Aria Automation
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-22249 | 8.18.x – < 8.18.1 patch2 | VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) | HIGH 8.2 | 0.4 % | ||
| CVE-2025-22215 | 8.x – < 8.18.1 patch 1 | VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215) | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-22280 | 8.x – < 8.17.0 | VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280) | HIGH 8.5 | 0.5 % |