Description

Acunetix determined that the VMware Aria Operations for Networks is vulnerable to remote code execution attack.

Remediation

Upgrade to the latest version of VMware Aria Operations for Networks

References

VMSA-2023-0012.2

Related Vulnerabilities

Apache Struts 2 ClassLoader manipulation and denial of service (S2-020)

Ruby Improper Input Validation Vulnerability (CVE-2015-7551)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42047)

Undertow Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-10212)

Oracle Database Server CVE-2006-5339 Vulnerability (CVE-2006-5339)

Severity

Critical

Classification

CVE-2023-20887 CWE-77 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Code Execution Known Vulnerabilities