The version of VMware Aria Operations for Logs (formerly VMware vRealize Log Insight) running on the remote host is affected by multiple vulnerabilities, including the following:

  - VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with     View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware     Aria Operations for Logs. (CVE-2025-22218)

  - VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor     with non-administrative privileges may be able to inject a malicious script that (can perform stored     cross-site scripting) may lead to arbitrary operations as admin user. (CVE-2025-22219)

  - VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor     with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that     could be executed in a victim's browser when performing a delete action in the Agent Configuration.
    (CVE-2025-22221)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

VMware Aria Operations for Logs < 8.18.3 Multiple Vulnerabilities (VMSA-2025-0003)

high Nessus Plugin ID 215005

Version 1.3

Version 1.1

Version 1.3 Feb 7, 2025, 12:31 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202502071231
Version 1.1 Feb 5, 2025, 10:34 PM New Plugin Feed: 202502052234