CVE-2025-22249
VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.
Vendor
Product
CWE
Yayın Tarihi
2025-05-13 06:15:36
Güncelleme
2025-07-11 14:27:30
Source Identifier
security@vmware.com
KEV Date Added
-