The version of VMware Aria Operations for Logs (formerly VMware vRealize Log Insight) running on the remote host is affected by multiple vulnerabilities, including the following:

  - VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with     View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware     Aria Operations for Logs. (CVE-2025-22218)

  - VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor     with non-administrative privileges may be able to inject a malicious script that (can perform stored     cross-site scripting) may lead to arbitrary operations as admin user. (CVE-2025-22219)

  - VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor     with admin privileges to VMware Aria Operations for Logs may be able to inject a malicious script that     could be executed in a victim's browser when performing a delete action in the Agent Configuration.
    (CVE-2025-22221)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

VMware Aria Operations for Logs < 8.18.3 Multiple Vulnerabilities (VMSA-2025-0003)

critical Nessus Plugin ID 215005

Version 1.5