Skip to content
Sign in
8.8 High

CVE-2023-20888 Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network…

Description

Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria Operations for Networks and valid 'member' role credentials may be able to perform a deserialization attack resulting in remote code execution.

Affected products and versions

Product Affected versions Fixed in
Aria Operations for Networks (Formerly vRealize Network Insight) Versions not published

Other CVEs of Aria Operations for Networks (Formerly vRealize Network Insight)

The 3 CVEs of Aria Operations for Networks (Formerly vRealize Network Insight) →
CVE-2023-20889 Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access… 7.5 High CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability 9.8 Critical
Track this CVE