CVE-2023-20888

HIGH 8.8EPSS 82.3%

Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria Operations for Networks and valid 'member' role credentials may be able to perform a deserialization attack resulting in remote code execution.

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 82.28% chance of exploitation in the next 30 days, 100th percentile
Nuclei: high · CWE-502
Published: 2023-06-07
Updated: 2025-01-07

Nuclei templates (1)

projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20888.yaml

References

Related