SQL Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrat…CVE-2020-3984Vmware · 22% likely

   CWE-89

2. An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter…CVE-2024-38814Vmware · CVSS 8.8 · 15% likely

   CWE-89

3. VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code e…CVE-2022-31659Vmware · 3.0% likely

   CWE-89

4. VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential infor…CVE-2020-4003Vmware · 1.2% likely

   CWE-89

5. CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverterCVE-2026-22730VMware · CVSS 8.8 · 0.6% likely

   CWE-89

6. VMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)CVE-2024-22280VMware · CVSS 8.5 · 0.5% likely

   CWE-89

7. Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated the severity of the issue to be in the Moderate severity ra…CVE-2025-41233VMware · CVSS 6.8 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.