CVE-2024-22277 in Cloud Director Availability

Résumé

par MITRE • 04/07/2024

VMware Cloud Director Availability contains an HTML injection vulnerability. A malicious actor with network access to VMware Cloud Director Availability can craft malicious HTML tags to execute within replication tasks.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: Vmware
• Réserver: 08/01/2024
• Divulgation: 04/07/2024
• Modérer: accepté
• Entrée: VDB-270348
• CPE: prêt
• CWE: CWE-80 (confirmé)
• CVSS: 5.4 (NVD)
• EPSS: 0.00325
• KEV: non
• Activités: très faible
• Secteur: Education, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-22277
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-22277
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-22277/