OpenSSH Vulnerability CVE-2025-61984 and CVE-2025-61985 found in Aria Operations and Logs

Products

• VMware Aria Operations (formerly vRealize Operations) 8.x
• VMware vRealize Log Insight 8.x
• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Vulnerability scanners detected OpenSSH vulnerability on Aria Operations and Logs
• For more information about this CVE, please refer to: CVE-2025-61984  and CVE-2025-61985
• The scanner recommended upgrading OpenSSH to version 10.1 or later

Environment

VMware Aria Operations 8.x

VMware Aria Operations for Logs 8.x

Cause

This vulnerability impacts OpenSSH version before 10.1. The CVE's carries a CVSS score of 3.6 (Low severity).

Resolution

VMware by Broadcom is aware of CVE-2025-61984 and CVE-2025-61985. Please refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.

Please contact Broadcom Support for any further queries.

Additional Information

VMware Security response