CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
3 CVEs tagged to vmware / aria_automation — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMw…
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL que…
Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organ…