Live › vulnerability › CVE-2023-20887
Go to dashboardVMware Aria Operations for Networks (formerly vRealize Network Insight) has a command injection flaw. An attacker with network access can run commands on the server, which is remote code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| VMware Aria Operations for Networks | vendor | – | – |
| vmware aria operations for networks | vendor | >= 6.2.0, <= 6.10.0 | – |
Unknown from the sources.
Apply the VMware-published update for Aria Operations for Networks per the vendor advisory; the sources do not name the fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2023-20887")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.