CVE-2025-22217 — N/A / VMware AVI Load Balancer

CVE-2025-22217

N/A / VMware AVI Load Balancer PUBLISHED

Description (CNA)

Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulnerability in affected VMware products. A malicious user with network access may be able to use specially crafted SQL queries to gain database access.

Affected (CNA)

Vendor / product	Versions
N/A / VMware AVI Load Balancer	affected VMware AVI Load Balancer 30.1.x and VMware AVI Load Balancer 30.2.x and

CWE

CWE-89

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25346

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.