CVE-2023-20887: Vmware Aria Operations for Networks Command Injection Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-06-22. EPSS: 98.3% chance of exploitation in the next 30 days.

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Affected products

• VMware Aria Operations for Networks: from 6.2.0, up to and including 6.10.0

Published 2023-06-07. Last modified 2026-06-17.