{"id":"CVE-2024-38814","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-38814","generatedAt":"2026-11-04T21:14:29.712Z","title":"An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware.","description":"An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A\n malicious authenticated user with non-administrator privileges may be \nable to enter specially crafted SQL queries and perform unauthorized \nremote code execution on the HCX manager. \nUpdates are available to remediate this vulnerability in affected VMware products.","published":"2024-10-16T17:15:16.000Z","lastModified":"2026-06-17T07:41:06.000Z","status":"Analyzed","sourceIdentifier":"security@vmware.com","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-89"],"affected":["vmware/vmware hcx"],"epss":{"score":0.15405,"percentile":0.96792,"date":"2026-11-03","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 15.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25019","tags":["Third Party Advisory"],"source":"security@vmware.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-38814","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}