VendorsVMwarearia_automationall versions
Vulnerabilities

VMware Aria Automation

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2023-34063
Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.
Published 2024-01-16 · Modified
9.9EPSS 0.009
CVE-2024-22280
VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)
Published 2024-07-11 · Modified
8.5EPSS 0.005
CVE-2025-22249
VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)
Published 2025-05-13 · Analyzed
8.2EPSS 0.003