« Volver al listado

CVE-2025-22249

Estado: AnalizadaAlta (8.2)—

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

XSS DOM basado que requiere interacción del usuario (UI:R) para robar token de acceso. El atacante ejecuta JavaScript en el navegador y accede a credenciales almacenadas (token).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict Web-Based ContentUser TrainingUser Account ManagementPrivileged Account ManagementNetwork SegmentationLimit Access to Resource Over Network

Tecnologías afectadas (3)

Vmware — Aria AutomationVmware — Cloud FoundationVmware — Telco Cloud Platform

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-22249",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-22249",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-13T13:49:44.097131Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "Vmware Aria Automation",
          "versions": [
            {
              "status": "affected",
              "version": "8.18.x",
              "lessThan": "8.18.1 patch2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "any"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "VMware Cloud Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "5.x",
              "lessThan": "8.18.1 patch 2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "4.x",
              "lessThan": "8.18.1 patch 2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "any"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "VMware",
          "product": "VMware Telco Cloud Platform",
          "versions": [
            {
              "status": "affected",
              "version": "5.x",
              "lessThan": "8.18.1 patch 2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "any"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-05-13T06:15:36.403",
  "references": [
    {
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25711",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@vmware.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL."
    },
    {
      "lang": "es",
      "value": "La automatización de VMware Aria contiene una vulnerabilidad de Cross Site Scripting (XSS) basada en DOM. Un atacante malicioso podría aprovechar esta vulnerabilidad para robar el token de acceso de un usuario conectado al dispositivo de automatización VMware Aria, engañándolo para que haga clic en una URL maliciosa."
    }
  ],
  "lastModified": "2026-06-17T08:45:55.317",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:aria_automation:8.18.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34CB9DCB-C7F6-48CE-B0CD-510B7E9E52D7"
            },
            {
              "criteria": "cpe:2.3:a:vmware:aria_automation:8.18.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA903210-107C-4005-9EBD-A62609D1081E"
            },
            {
              "criteria": "cpe:2.3:a:vmware:aria_automation:8.18.1:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5495556A-74A4-4FA2-B48F-55E6B0F5875D"
            },
            {
              "criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E48E9C72-7BD4-4CC7-B44A-B5A017451552",
              "versionEndIncluding": "5.2.1",
              "versionStartIncluding": "4.0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DCC8565-8FB0-4A1D-A761-48B21155A5F6",
              "versionEndIncluding": "5.0.1",
              "versionStartIncluding": "5.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@vmware.com"
}