Lucene search

VmwareCVE-2024-22277

HistoryJul 04, 2024 - 2:15 p.m.

CVE-2024-22277

2024-07-0414:15:01

CWE-79

vmware

web.nvd.nist.gov

vmware cloud director

html injection

vulnerability

replication tasks

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

9.1%

JSON

VMware Cloud Director Availability contains an HTML injection vulnerability.
A
malicious actor with network access to VMware Cloud Director
Availability can craft malicious HTML tags to execute within replication
tasks.

Affected configurations

Nvd

Node

vmwarecloud_directorRange4.0.0–4.7.2

VendorProductVersionCPE
vmwarecloud_director*cpe:2.3:a:vmware:cloud_director:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	cloud_director	*	cpe:2.3:a:vmware:cloud_director::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "VMware Cloud Director Availability",
    "vendor": "N/A",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Cloud Director Availability 4.x"
      }
    ]
  }
]

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24557

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

9.1%

JSON

Related for CVE-2024-22277