CVE-2025-41245mediumCWE-1188

CVE-2025-41245: falha de média gravidade em VMware Aria Operations

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar VMware Cloud Foundation+ Monitorar Telco Cloud Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.9epss 0.6%
VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
VMware · VMware Aria OperationsVMware · VMware Cloud FoundationVMware · VMware Telco Cloud InfrastructureVMware · VMware Telco Cloud Platform
CVEs relacionadas — VMware Aria Operations

No mesmo produto, das mais perigosas para as menos.

CVE-2026-22719HIGHVMware Aria Operations command injection vulnerabilityEPSS 18.3%KEVCVE-2025-41244HIGHVMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)EPSS 16.4%KEVCVE-2025-22224CRITICALCVE-2025-22224EPSS 1.6%KEVCVE-2026-22721MEDIUMVMware Aria Operations privilege escalation vulnerabilityEPSS 0.7%CVE-2025-22222HIGHVMware Aria Operations information disclosure vulnerability (CVE-2025-22222)EPSS 0.5%CVE-2026-22720HIGHVMware Aria Operations stored cross-site scripting vulnerabilityEPSS 0.4%