Vulnerabilities > Vmware > Aria Automation > 8.16.0

DATE CVE VULNERABILITY TITLE RISK
2024-07-11 CVE-2024-22280 SQL Injection vulnerability in VMWare Aria Automation and Cloud Foundation
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.
network
low complexity
vmware CWE-89
8.1