coldbraid

CVE-2023-20887 VMware Aria Operations For Networks

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

CVSS
not scored

CWE-77

On CISA’s exploited list

Vmware Aria Operations for Networks Command Injection Vulnerability

Added
2023-06-22
Federal patch deadline
2023-07-13
Ransomware use
not known