Diagnostics for VMware Cloud Foundation in Aria Operation Finding False Positive Tracking and Reporting

Products

• VCF Operations

Issue/Introduction

Diagnostics for VMware Cloud Foundation in Aria Operations is the replacement for Skyline Advisor and Skyline Health Diagnostics. Please see the following link for more details on  Diagnostics for VMware Cloud Foundation - What is Diagnostics for VMware Cloud Foundation

It is possible to have a false positive within a Diagnostics for VCF Finding. We do our best to make sure all scenarios are covered when creating a finding; however, sometimes certain scenarios are missed or fixes are released that we have not accounted for.

Environment

Aria Operation 8.18.x

Resolution

Currently have the following active findings which we are in the process of being fixing:

Last Updated: February 12, 2026.

AUTOMATION_CVE202522215_VMSA_202501 & AUTOMATION_CVE202522249_VMSA_202508

• Comment: Findings for VMSA-2025-0001 and VMSA-2025-0008 still show after patch updates. 
• Status: The VCF Automation version number did not increase with patch updates. The findings check if you have upgrade to 8.18.1, but can not check the patch level. 

HCX ESX Hosts are reported by upgrade findings. We are working to get these hosts filtered out in a future release of operations. As a workaround follow the steps outlined in the following KB. https://knowledge.broadcom.com/external/article/376592 

Operations 8.18.x

vCenter_cve_2025_41225and8_VMSA_202510 is recommending vCenter 8.0 U3g instead of vCenter 8.0 U3e. vCenter_CVE_2025_41225and8_VMSA_202510 was replaced with the check of vCenter_CVE_2025_41241_VMSA_202514. VMSA-2025-0010 recommends 8.0U3e and VMSA-2025-202514 recommends 8.0u3g. This will be updated in the next release. 

Operations 9.x

VCFOperations_SmallRootPartition_KB_317866 - currently checks if your Operations for Logs disk space is less than 15gb in size. The check will change for less than 50% free space in the next release. 

NSX_VCFHostNotConfiguredInCluster_KB_318066 - currently checks for "nsx-esx-datapath" the check will change to contains "nsx" in the next release. 

 

Note: If you are seeing a finding which you feel is a false positive please restart your operations cluster. There have been reported instances where the database becomes out of sync with the Diagnostics management pack. Restarting the operations cluster has resolved this. 

 

The workaround until we have a fix for this false positive is to disable the finding in your environment. Please follow the steps in the following KB to disable this findings in your Diagnostics for VCF environment.

Overwriting the Diagnostics Configuration

 

Additional Information