CVE-2025-22217: SQL Injection
Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware. Patches are available to remediate this vulnerability in affected VMware products.
A malicious user with network access may be able to use specially crafted SQL queries to gain database access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22217?
CVE-2025-22217 is classified as a critical vulnerability due to its potential to allow unauthenticated access via SQL Injection.
How do I fix CVE-2025-22217?
To remediate CVE-2025-22217, apply the available patches provided by VMware for the affected versions of the Avi Load Balancer.
What are the potential impacts of CVE-2025-22217?
Exploitation of CVE-2025-22217 could allow an attacker to execute arbitrary SQL commands and potentially access sensitive data.
Which versions of VMware Avi Load Balancer are affected by CVE-2025-22217?
CVE-2025-22217 affects specific versions of VMware Avi Load Balancer, and it's recommended to check the VMware documentation for detailed version applicability.
Is authentication required to exploit CVE-2025-22217?
No, exploitation of CVE-2025-22217 does not require authentication, making it particularly dangerous for exposed systems.