CVE-2023-34063

—

CVSS 3.1

8.3 high

EPSS

<1%p59

Published

Jan 16, 2024 (Jan 16, 2024)

Modified

Jun 17, 2026

Description

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.

Vendors: vmware
Products: aria automation, cloud foundation
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news5 stories

VMware fixed critical SQL

Security AffairsJul 11, 00:09 UTC · Jul 11, 2024Vulnerability CVE-2024-22280 CVE-2023-340631

Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed

Help Net SecurityJan 21, 00:00 UTC · Jan 21, 2024Exploit / PoC in the wildCVE-2023-36025 CVE-2023-22527 CVE-2024-0519+3 CVEs

CVE-2023-34063

In the news5 stories

VMware fixed critical SQL

Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed

VMware: Plug critical Aria Automation hole immediately! (CVE-2023-34063)

Citrix, VMware, and Atlassian Hit with Critical Flaws — Patch ASAP!

VMware fixed a critical flaw in Aria Automation. Patch it now!