← Back to browse · API

CVE-2023-20888

Severity
HIGH
CVSS
8.8
EPSS
0.82282
Risk score
64.0
CISA KEV
No
PoC
No
Published
2023-06-07
Modified
2025-01-07
First seen
2026-08-07
Aliases
EUVD-2023-25059, GHSA-PV9W-3HHV-XHXR
Products
n/a:Aria Operations for Networks (Formerly vRealize Network Insight) Aria Operations for Networks (Formerly vRealize Network Insight) 6.x
Sources
euvd EUVD-2023-25059

Description

Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria Operations for Networks and valid 'member' role credentials may be able to perform a deserialization attack resulting in remote code execution.

References