H-ISAC TLP White Threat Bulletin: Multiple Vulnerabilities Affecting VMware Solutions Under Active Exploitation

March 4, 2025

The vulnerabilities are tracked as CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226.

Health-ISAC provides this information for situational awareness and encourages users to upgrade affected VMware products to the latest patched versions.

View the detailed report below.

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

National Advisor for Cybersecurity and Risk, AHA

jriggi@aha.org

(O) +1 202 626 2272

More on John Riggi
Learn more about AHA's Cybersecurity and Risk Advisory Services

Key Resources

Related Resources

Advisory
Hospitals That Are Oracle Customers Urged to Take Immediate Action to Address Security Vulnerability
Public
Issue Landing Page
Cybersecurity and Risk Advisory Service
Issue Landing Page
Support for Your Cybersecurity Program
Guides/Reports
Cybersecurity and Risk Advisory Services
Standards/Guidelines
Become an AHA Preferred Cybersecurity and Risk Provider
Public
Issue Landing Page
AHA Preferred Cybersecurity & Risk Provider Program