CVEブラウザに戻る

CVE-2020-4006

🔥 Known Exploited (CISA KEV)CRITICAL

9.1

CVSS Severity Score

EPSS Score54.8400%

EPSS Percentile96.43th

Published2020-11-23

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

Affected Platforms (CPE)

📦

Vmware

Identity Manager

= 3.3.1= 3.3.2= 3.3.3

📦

Vmware

Identity Manager Connector

= 3.3.1= 3.3.2= 3.3.3

📦

Vmware

One Access

= 20.01= 20.10

📦

Vmware

Cloud Foundation

= 4.0= 4.0.1

References & Advisories

🔗 https://www.vmware.com/security/advisories/VMSA-2020-0027.html

🔗 https://www.kb.cert.org/vuls/id/724367

🔗 https://www.vmware.com/security/advisories/VMSA-2020-0027.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4006

関連するセキュリティ記事

デイリー・グローバル・サイバー脅威インテリジェンス・ダイジェスト｜2026年7月21日

VMware vCenter、F5 BIG-IP、および GitLab における重大な脆弱性アドバイザリの技術分析と、インフラ・医療機関を対象とした最新セキュリティ対策ガイド。

関連する脆弱性情報

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-542496.8

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 t...

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.

CVE-2026-84977.4

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earli...