CVE-2023-20887.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.

EXPLOITATION STATUSCISA known exploitedAdded Jun 22, 2023

RECORD STATUSAwaiting NVD dataModified Jun 22, 2023

Disclosure summary

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

CISA remediation guidance

Apply updates per vendor instructions.

Original records & references

NIST NVD record
CVE Program record
CISA KEV catalog entry

PUBLISHED 2023-06-22T00:00:00-04:00
MODIFIED 2023-06-22T00:00:00-04:00
INGESTED 2026-10-06T11:42:58-04:00