CVE-2024-22280: VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter…

PriorityP348high8.1CVSS 3.1

AVNACLPRLUINSUCHIHAN

EPSS

0.47%

37.6th percentile

VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
vmware	aria_automation	< 8.17.0	8.17.0
vmware	cloud_foundation	4.0 – 5.0	—
vmware	vmware_aria_automation	>= 8.x < 8.17.0	8.17.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.