Vulnerability · Published Jan 8, 2025 · Assigned by vmware
CVE-2025-22215VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)
Medium 4.3
In plain English
A medium-severity server-side request forgery in VMware Aria Automation from VMware. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 81.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization Member" access to Aria Automation may exploit this vulnerability enumerate internal services running on the host/network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| VMware | VMware Aria Automation | 8.x – before 8.18.1 patch 1 |
| VMware | VMware Cloud Foundation (VMware Aria Automation) | 5.x – before 8.18.1 patch 14.x – before 8.18.1 patch 1 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N