Vulnerabilitycritical

VMware fixed critical SQL

Security Affairsby @securityaffairsJul 11, 2024 · 00:09 UTC (Jul 11, 2024)1 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2024-22280 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-22280 CVE-2023-34063

Tags: cve-2024-22280 cve-2023-34063 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34063	Aria Automation contains a Missing Access Control vulnerability	8.3	<1%		Jan 16, 2024
CVE-2024-22280	VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product	8.1	<1%		Jul 11, 2024

From the original article

1 min read at securityaffairs.com

VMware addressed a critical SQL-Injection vulnerability, tracked as CVE-2024-22280, impacting Aria Automation. Virtualization giant VMware addressed a high-severity SQL-injection vulnerability, tracked as CVE-2024-22280 (CVSSv3 base score of 8. 5), in its Aria Automation solution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.