VMware vRealize Network Insight vulnerabilities

3 CVEs affecting VMware vRealize Network Insight, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20889, published 2023-06-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-20888, published 2023-06-07. High severity, CVSS 8.8. EPSS: 82.3% chance of exploitation in the next 30 days. Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria Operations for Networks and valid 'member' role credentials…
CVE-2023-20889, published 2023-06-07. High severity, CVSS 7.5. EPSS: 79.1% chance of exploitation in the next 30 days. Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection…
CVE-2022-31702, published 2022-12-14. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without…