CyberSec.Space Logo
Back to CVE Browser

CVE-2020-4006

🔥 Known Exploited (CISA KEV)CRITICAL
9.1
CVSS Severity Score
EPSS Score54.8400%
EPSS Percentile96.43th
Published2020-11-23
Last Modified2025-10-30
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

Affected Platforms (CPE)

📦
Vmware

Identity Manager

= 3.3.1= 3.3.2= 3.3.3
📦
Vmware

Identity Manager Connector

= 3.3.1= 3.3.2= 3.3.3
📦
Vmware

One Access

= 20.01= 20.10
📦
Vmware

Cloud Foundation

= 4.0= 4.0.1

References & Advisories

🔗 https://www.vmware.com/security/advisories/VMSA-2020-0027.html
🔗 https://www.kb.cert.org/vuls/id/724367
🔗 https://www.vmware.com/security/advisories/VMSA-2020-0027.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4006

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

2026-07-21

Related Vulnerabilities

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-542496.8

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 t...

CVE-2025-65340

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.

CVE-2026-84977.4

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earli...