VDB
CVE-2025-22220
CVE-2025-22220
PUBLISHED
VMware Aria Operations for Logs (ehemals vRealize Log Insight) ist ein Protokollanalysetool. VMware Aria Operations bietet eine einheitliche Plattform für das IT-Betriebsmanagement in Private-, Hybrid- und Multi-Cloud-Umgebungen. VMware Cloud Foundation ist eine Hybrid Cloud-Plattform für VM-Management und Container-Orchestrierung.
EPSS 0.15% · 35.6th percentile
Risk Scores
EPSS Score
0.15%
35.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| VMware | VMware Aria Operations for Logs <8.18.3 | |
| Google Cloud Platform | ||
| VMware | VMware Cloud Foundation <KB92148 |
Timeline
- Jan 2, 2025 CVE ID Reserved
- Jan 30, 2025 PoC Published
- Jan 30, 2025 CVE Published
- Jan 30, 2025 PoC Published
- Jan 30, 2025 PoC Published
- Jan 31, 2025 EPSS Score
- Jan 31, 2025 PoC Published
- Feb 15, 2025 EPSS Score
- Feb 25, 2025 Coalition ESS Score
- Mar 2, 2025 EPSS Score
- Mar 17, 2025 EPSS Score
- Mar 24, 2025 Coalition ESS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0228.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0228 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329 advisory
- https://cloud.google.com/support/bulletins#gcp-2025-028 advisory