- Description
- Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulnerability in affected VMware products. A malicious user with network access may be able to use specially crafted SQL queries to gain database access.
- Source
- security@vmware.com
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 8.6
- Impact score
- 4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
- Severity
- HIGH
- security@vmware.com
- CWE-89
- Hype score
- Not currently trending
7/10 Don't forget @VMware Avi Load Balancer users! Patch CVE-2025-22217 to prevent database compromise. #AviLoadBalancerSecurity 🔐📊
@Eth1calHackrZ
3 Feb 2025
64 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMSA-2025-0002: VMware Avi Load Balancer addresses an unauthenticated blind SQL Injection vulnerability (CVE-2025-22217) https://t.co/DRXJkH2S1X #infosec #VMWare
@allaboutclait
31 Jan 2025
62 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 ALERTE SECURITE: #CVE-2025-22217 expose les systèmes #VMwareAviLoadBalancer à une #SQLInjection non authentifiée! Les hackers peuvent accéder à vos bases de données sans autorisation. #CyberSec #Hacking #TechAlert #SecurityPatch #NetworkSecurity https://t.co/oZUU9qgo63
@_F2po_
31 Jan 2025
39 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Warning: High unauthenticated blind SQL Injection flaw in @AviNetworks . #CVE-2025-22217 CVSS: 8.6. This can lead to unauthorized access! #Patch #Patch #Patch
@y1659rsgh
31 Jan 2025
4 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMSA-2025-0002: VMware Avi Load Balancer addresses an unauthenticated blind SQL Injection vulnerability (CVE-2025-22217)
@y1659rsgh
31 Jan 2025
4 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware, la faille de Sécurité CVE-2025-22217 pourrait permettre une injection de code SQL. Bulletin de sécurité VMware 25346 du 28 janvier 2025. https://t.co/4qy218Rhmq #.Code Arbitraire à Distance #.Correctif #.Faille #.Injection de code (SQL) #CERT
@NicolasCoolman
30 Jan 2025
16 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
Broadcom ha emitido una alerta sobre una vulnerabilidad de inyección SQL de alta gravedad en VMware Avi Load Balancer, identificada como CVE-2025-22217, con una calificación CVSS de 8.6. Esta falla permite a usuarios no autenticados ejecutar consultas SQL maliciosas para obtener
@citarafy
30 Jan 2025
71 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
🚨 CVE-2025-22217 exposes VMware Avi Load Balancer to blind SQL injection, risking data breaches. Hackers can exploit it remotely—act now! 🛡️ Security Joes provides expert defense & rapid response. Stay protected! 🔗 https://t.co/JZlUq9B0Rx https://t.co/ioqfkY6Mzl
@SecurityJoes
29 Jan 2025
30 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Avi Load Balancer Güvenlik Açığı (CVE-2025-22217): Ağları Blind SQLi Saldırılarına Maruz Bırakıyor https://t.co/AgV0oCVXNx
@cyberwebeyeos
29 Jan 2025
27 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMwareはAvi Load Balancerに「CVE-2025-22217」として登録された高リスクのブラインドSQLインジェクション脆弱性を警告。CVSSスコアは8.6で、影響を受けるバージョンは30.1.1、30.1.2、30.2.1、30.2.2。回避策はなく、即時パッチ適用が推奨される。 https://t.co/yK1pd5fiKn
@01ra66it
29 Jan 2025
162 Impressions
0 Retweets
2 Likes
1 Bookmark
0 Replies
0 Quotes
VMware Avi Load Balancer Flaw (CVE-2025-22217) Exposes Networks to Blind SQLi Attacks This vulnerability, identified as CVE-2025-22217 and given a CVSSv3 base score of 8.6, could allow attackers to gain unauthorized access to sensitive data https://t.co/K3Cf95Aktp
@the_yellow_fall
29 Jan 2025
317 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 WATCH OUT: A new vulnerability, CVE-2025-22217, in VMware Avi Load Balancer could give attackers full access to your databases! No workarounds—only updates will protect you. Seriously attacks is going on https://t.co/j9z7kLmYNn
@SamTechwest
29 Jan 2025
60 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 WATCH OUT: A new vulnerability, CVE-2025-22217, in VMware Avi Load Balancer could give attackers full access to your databases! No workarounds—only updates will protect you. Running affected versions? Learn more: https://t.co/xpIan2lv94
@TheHackersNews
29 Jan 2025
10206 Impressions
13 Retweets
27 Likes
7 Bookmarks
0 Replies
1 Quote
VMwareは Avi Load Balancer に 認証不要のブラインドSQLインジェクション の脆弱性 があることを報告しました。 この脆弱性は CVE-2025-22217 として登録されており、悪意のある攻撃者が特別に細工したSQLクエリを送信することで、データベースに不正アクセスできる可能性があります。 https://t.co/yYbmuRQAEh
@t_nihonmatsu
29 Jan 2025
261 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
VMware fixes CVE-2025-22217 in Avi Load Balancer #VMwareAvi #CVE-2025-22217 https://t.co/PIa2u91gxV
@pravin_karthik
29 Jan 2025
101 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
VMware Warns of High-Risk Blind SQL Injection Bug in Avi Load Balancer - (CVE-2025-22217) https://t.co/zP8p0d3nce
@SecurityWeek
28 Jan 2025
302 Impressions
1 Retweet
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-22217: HIGH] Critical cyber security update: Vulnerability found in Avi Load Balancer allows unauthenticated SQL Injection access. Patch your VMware products to prevent unauthorized database access!#cybersecurity,#vulnerability https://t.co/YRfvjYXpVE https://t.co/pOVhQ
@CveFindCom
28 Jan 2025
19 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-22217 Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulner… https://t.co/mKxuXvWGen
@CVEnew
28 Jan 2025
320 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes