Beveiligingsadvies

CVE-2024-22280

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-11 04:39:09

Laatst bijgewerkt 2025-03-14 18:42:23

Toegewezen door vmware

CVSS-score 8.5

Status PUBLISHED

Beschrijving

VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.

← Alle CVE's bekijken Bekijk op cve.org ↗