Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2025-01-30	CVE-2025-22220	Unspecified vulnerability in VMWare Aria Operations for Logs and Cloud Foundation VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user. network low complexity vmware	5.4
2025-01-30	CVE-2025-22221	Unspecified vulnerability in VMWare Aria Operations for Logs and Cloud Foundation VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that could be executed in a victim's browser when performing a delete action in the Agent Configuration. network low complexity vmware	4.8