CVE-2023-20878: VMware Cloud Foundation

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system.

Affected products

• VMware Cloud Foundation: from 4.0, up to and including 4.5
• VMware vRealize Operations: version 8.6.0 only; version 8.10.0 only

Published 2023-05-12. Last modified 2026-06-17.