CyberSec.Space Logo
Back to CVE Browser

CVE-2023-20887

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-06-07
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Affected Platforms (CPE)

📦
Vmware

Aria Operations For Networks

>= 6.2.0 and <= 6.10.0

References & Advisories

🔗 http://packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html
🔗 https://www.vmware.com/security/advisories/VMSA-2023-0012.html
🔗 http://packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html
🔗 https://www.vmware.com/security/advisories/VMSA-2023-0012.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20887

Related Security Intelligence Articles

Global Cyber Intel Digest: July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

2026-07-21

Related Vulnerabilities

CVE-2026-175345.5

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist i...

CVE-2026-579907.4

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose...

CVE-2026-579897.4

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-579785.4

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.