CVE-2024-22277

MEDIUM 5.4CVE-2024-22277 · Published 04/07/2024 · updated 17/06/2026

In short

CVE-2024-22277 is a MEDIUM (CVSS 5.4) vulnerability affecting cloud director (vmware).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 25.6% of all vulnerabilities.
Fix: update to 4.7.2 or later.

Package	Affected versions	Patched versions
cloud director vmware	`≥ 4.0.0, < 4.7.2`	`4.7.2`

Description

VMware Cloud Director Availability contains an HTML injection vulnerability. A malicious actor with network access to VMware Cloud Director Availability can craft malicious HTML tags to execute within replication tasks.

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24557 · Third Party Advisory

More vulnerabilities in cloud director

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free