VMWare Products Multiple Vulnerabilities

Release Date: 13 May 2025

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

Multiple vulnerabilities were identified in VMware products. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting and data manipulation on the targeted system.

---

Impact

• Cross-Site Scripting
• Data Manipulation

---

System / Technologies affected

• VMware Cloud Foundation 4.x
• VMware Cloud Foundation 5.x
• VMware Telco Cloud Platform 5.x
• VMware Aria Automation 8.18.x
• VMware Tools 11.x.x
• VMware Tools 12.x.x

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

• Apply fixes issued by the vendor:
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25711

---

Vulnerability Identifier

• CVE-2025-22247
• CVE-2025-22249

---

Source

• VMware

---

Related Link

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25711