All CVE records

CVE-2023-20887 — Vmware Aria Operations for Networks Command Injection Vulnerability

CISA KEV listed Added June 22, 2023 Remediate by July 13, 2023

Description

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://www.vmware.com/security/advisories/VMSA-2023-0012.html; https://nvd.nist.gov/vuln/detail/CVE-2023-20887

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer