Filtered by vendor Vmware Subscriptions
Filtered by product Aria Automation Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-22280 1 Vmware 2 Aria Automation, Cloud Foundation 2024-11-21 8.5 High
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.
CVE-2023-34063 1 Vmware 2 Aria Automation, Cloud Foundation 2024-11-21 9.9 Critical
Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.