CVE-2025-22221

Name of the Vulnerable Software and Affected Versions VMware Aria Operation for Logs (affected versions not specified)

Description The issue is related to a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration. This could allow a remote attacker to inject and execute arbitrary code in the user's browser within the context of the vulnerable web site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.