CVE-2024-38814

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager. Updates are available...

CVE-2024-38814: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager. Updates are available...

VMware HCX SQL注入漏洞

VMware HCX is an application mobility platform from VMware, Inc. designed to simplify application migration, workload rebalancing, and business continuity across data centers and clouds. VMware HCX suffers from a SQL injection vulnerability that stems from a vulnerability that could allow a...