Known vulnerabilities in Aria Automation (formerly vRealize Automation) 8.18.1 patch 1

Vendor: Broadcom
Version: 8.18.1 patch 1
Software CPE: cpe:2.3:a:broadcom:vrealize_automation:*:*:*:*:*:*:*:*
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Aria Automation (formerly vRealize Automation) version 8.18.1 patch 1 Aria Automation (formerly vRealize Automation) 8.18.1 patch 1 is affected by 1 vulnerabilities: 1 low Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108930 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22249
CWE-79 Low
No
No
8.18.1 patch 2 12.05.2025 SB2025051243