Description

Acunetix determined that the VMware Aria Operations for Networks is vulnerable to remote code execution attack.

Remediation

Upgrade to the latest version of VMware Aria Operations for Networks

References

VMSA-2023-0012.2

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1394)

MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8289)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7858)

SugarCRM Other Vulnerability (CVE-2009-2146)

GlassFish CVE-2016-5477 Vulnerability (CVE-2016-5477)

Severity

Critical

Classification

CVE-2023-20887 CWE-77 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Code Execution Known Vulnerabilities