Veille CVE

Semaine du 27 octobre au 2 novembre 2025

4 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2025-41244 – Non évaluée Exploitée

    Broadcom VMware Aria Operations and VMware Tools

    Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability — Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

  2. CVE-2025-24893 – Non évaluée Exploitée

    XWiki Platform

    XWiki Platform Eval Injection Vulnerability — XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.

  3. CVE-2025-6205 – Non évaluée Exploitée

    Dassault Systèmes DELMIA Apriso

    Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability — Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application.

  4. CVE-2025-6204 – Non évaluée Exploitée

    Dassault Systèmes DELMIA Apriso

    Dassault Systèmes DELMIA Apriso Code Injection Vulnerability — Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.