CVE-2025-22217 – VMware Avi Load Balancer Blind SQL Injection

CVE ID : CVE-2025-22217

Published : Jan. 28, 2025, 7:15 p.m. | 12 hours, 44 minutes ago

Description : Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulnerability in affected VMware products. 

A malicious user with network access may be able to use specially crafted SQL queries to gain database access.

Severity: 8.6 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Go to Source