medium6.4
CVE-2024-22277
VMware Cloud Director Availability contains an HTML injection vulnerability.
Impact
VMware Cloud Director Availability contains an HTML injection vulnerability. A malicious actor with network access to VMware Cloud Director Availability can craft malicious HTML tags to execute within replication tasks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Director | from 4.0.0 before 4.7.2 |