CVE-2023-34063

CVSS 3.1: 8.3 high
EPSS: <1%p59
Published: Jan 16, 2024 · Jan 16, 2024
Modified: Jun 17, 2026

Analyze CVE-2023-34063 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.

Vendors: vmware

Products: aria automation, cloud foundation

Weakness: CWE-862

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

5 stories

VMware fixed critical SQL

Security AffairsJul 11, 00:09 UTC · Jul 11, 2024VulnerabilityCVE-2024-22280 CVE-2023-340633 · 1 read

Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed

Help Net SecurityJan 21, 00:00 UTC · Jan 21, 2024Exploit / PoCExploitedCVE-2023-36025 CVE-2023-22527 CVE-2024-0519+33 · 1 read

VMware: Plug critical Aria Automation hole immediately! (CVE-2023-34063)

Help Net SecurityJan 18, 00:00 UTC · Jan 18, 2024VulnerabilityCVE-2023-340632 · 1 read

Citrix, VMware, and Atlassian Hit with Critical Flaws — Patch ASAP!

The Hacker NewsJan 17, 04:23 UTC · Jan 17, 2024VulnerabilityExploitedCVE-2023-6548 CVE-2023-6549 CVE-2023-3519+32 · 1 read

VMware fixed a critical flaw in Aria Automation. Patch it now!

Security AffairsJan 16, 17:22 UTC · Jan 16, 2024VulnerabilityCVE-2023-340633 · 1 read