CVE-2024-38814

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. Amalicious authenticated user with non-administrator privileges may beable to enter specially crafted SQL queries and perform unauthorizedremote code execution on the HCX manager. Updates are available to r...