https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T01:53:41.837768+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-22249 CVE-2025-22249 — VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249) 2026-09-29T01:53:41.848288+00:00

Affected: Vmware Aria Automation, VMware Cloud Foundation, VMware Telco Cloud Platform

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL.