Vulnerabilities > Vmware > Aria Automation > 8.16.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-07-11 | CVE-2024-22280 | SQL Injection vulnerability in VMWare Aria Automation and Cloud Foundation VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database. | 8.1 |