VYPR

VMware Aria Automation

by Broadcom Corporation

CVEs (1)

  • CVE-2024-22280HigJul 11, 2024
    risk 0.55cvss 8.5epss 0.00

    VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.