high8.5
CVE-2024-22280
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product.
Impact
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Automation | before 8.17.0 |
| Vmware | Cloud Foundation | from 4.0 through 5.0 |