CVE-2024-22277: VMware Cloud Director

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware Cloud Director Availability contains an HTML injection vulnerability. A malicious actor with network access to VMware Cloud Director Availability can craft malicious HTML tags to execute within replication tasks.

Affected products

• VMware Cloud Director: from 4.0.0, before 4.7.2 (fixed in 4.7.2)

Published 2024-07-04. Last modified 2026-06-17.