Security News > 2025 > January > Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer
2025-01-29 05:29
Broadcom has alerted of a high-severity security flaw in VMware Avi Load Balancer that could be weaponized by malicious actors to gain entrenched database access. The vulnerability, tracked as CVE-2025-22217 (CVSS score: 8.6), has been described as an unauthenticated blind SQL injection. "A malicious user with network access may be able to use specially crafted SQL queries to gain database
News URL
https://thehackernews.com/2025/01/broadcom-warns-of-high-severity-sql.html
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-01-28 | CVE-2025-22217 | Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. | 0.0 |