返回 CVE 浏览器

CVE-2020-4006

🔥 Known Exploited (CISA KEV)CRITICAL

9.1

CVSS Severity Score

EPSS Score54.8400%

EPSS Percentile96.43th

Published2020-11-23

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

Affected Platforms (CPE)

📦

Vmware

Identity Manager

= 3.3.1= 3.3.2= 3.3.3

📦

Vmware

Identity Manager Connector

= 3.3.1= 3.3.2= 3.3.3

📦

Vmware

One Access

= 20.01= 20.10

📦

Vmware

Cloud Foundation

= 4.0= 4.0.1

References & Advisories

🔗 https://www.vmware.com/security/advisories/VMSA-2020-0027.html

🔗 https://www.kb.cert.org/vuls/id/724367

🔗 https://www.vmware.com/security/advisories/VMSA-2020-0027.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4006

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 21 日

本期威胁情报分析 VMware vCenter、F5 BIG-IP 与 GitLab 关键漏洞安全修补警讯，同时汇总最新医疗与关键基础设施平台遭勒索软件攻击之防御防范措施。

相关漏洞威胁

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-542496.8

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 t...

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.

CVE-2026-84977.4

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earli...