Aria Automation

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-22249 May 13, 06:15 HIGH PATCH This Week

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS VMware Cloud Foundation Telco Cloud Platform Aria Automation

NVD

CVSS 3.1

8.2

EPSS

0.2%

CVE-2024-22280 Jul 11, 05:15 HIGH This Week

VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi VMware Cloud Foundation Aria Automation

NVD

CVSS 3.1

8.1

EPSS

0.5%

CVE-2025-22249

EPSS 0% CVSS 8.2

HIGH PATCH This Week

XSS VMware Cloud Foundation +2

NVD

CVE-2024-22280

EPSS 0% CVSS 8.1

HIGH This Week

SQLi VMware Cloud Foundation +1

NVD