CVE-2023-20877: VMware Cloud Foundation

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution leading to privilege escalation.

Affected products

• VMware Cloud Foundation: from 4.0, up to and including 4.5
• VMware vRealize Operations: version 8.6.0 only; version 8.10.0 only

Published 2023-05-12. Last modified 2026-06-17.