High

Analysis Summary

CVE-2024-22280

VMware Aria Automation is vulnerable to SQL injection. A remote authenticated attacker could send specially crafted SQL statements, which could allow the attacker to perform unauthorized read/write operations in the database.

Impact

• Data Manipulation

Indicators of Compromise

CVE

• CVE-2024-22280

Affected Vendors

Affected Products

Remediation

Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.

VMware Security Advisory