CVE-2024-22280

Published: 2024-07-11T05:15Z

Last Modified: 2025-03-14T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt