Detections
Analytics
CVE-2023-20887
critical
Description
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.
From the Tenable Blog
CVE-2023-20887: VMware Aria Operations for Networks Command Injection
Published: 2023-06-14
VMware issues advisory to address three flaws in its VMware Aria Operations for Networks solution, including a critical command injection flaw assigned a CVSSv3 score of 9.8.