CVE-2024-38814

N/A / VMware HCX PUBLISHED

Description (CNA)

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager. Updates are available to remediate this vulnerability in affected VMware products.

Affected (CNA)

Vendor / product	Versions
N/A / VMware HCX	affected VMware HCX 4.8.0-4.8.2, VMware HCX 4.9.0-4.9.1, VMware HCX 4.10.0

CWE

CWE-89

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25019

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.