← Back to browse · API

CVE-2023-20887

Severity
CRITICAL
CVSS
9.8
EPSS
0.98281
Risk score
59.4
CISA KEV
Yes
PoC
No
Published
2023-06-07
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2023-25058, GHSA-8VX8-R5J3-F2VF
Products
VMware:Aria Operations for Networks, n/a:Aria Operations for Networks (Formerly vRealize Network Insight) Aria Operations for Networks (Formerly vRealize Network Insight) 6.x
Sources
cisa.gov CVE-2023-20887
euvd EUVD-2023-25058

Description

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

References