Aria Automation

DATE	CVE	VULNERABILITY TITLE	RISK
2024-07-11	CVE-2024-22280	SQL Injection vulnerability in VMWare Aria Automation and Cloud Foundation VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database. network low complexity vmware CWE-89	8.1
2024-01-16	CVE-2023-34063	Missing Authorization vulnerability in VMWare Aria Automation and Cloud Foundation Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows. network low complexity vmware CWE-862	8.3