Aria Automation vulnerabilities
3 known vulnerabilities in Aria Automation from VMware. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.2 High severity
Vmware Aria Automation: Improper Neutralization of Input During Web Page Generation
VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious craf
- 8.1 High severity
VMware Aria Automation: Improper Neutralization of Special Elements used in an SQL Command
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.
- 8.3 High severity
VMware Aria Automation, VMware Cloud Foundation: Missing Authorization
Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.