NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 1 read

CVE-2023-20864

CVSS 3.1: 9.8 critical
EPSS: 70%p99
Published: Apr 20, 2023 · Apr 20, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-20864 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.

Vendors: vmware

Products: aria operations for logs, cloud foundation

Weakness: CWE-502

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (70.4%)

In the news

8 stories

VMware addressed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation Segment

Security AffairsJul 25, 18:26 UTC · Jul 25, 2023VulnerabilityCVE-2023-20891 CVE-2023-208642 · 2 reads

60

VMware plugs security holes in VMware Aria Operations for Logs (CVE-2023-20864, CVE-2023-20865)

Help Net SecurityJul 11, 10:40 UTC · Jul 11, 2023VulnerabilityExploitedCVE-2023-20864 CVE-2023-208652

60

VMware warns customers of exploit available for critical vRealize RCE flaw CVE-2023

Security AffairsJul 11, 08:20 UTC · Jul 11, 2023VulnerabilityExploitedCVE-2023-20864 CVE-2023-20865 CVE-2023-208871

60

VMware fixes CVE-2023-20887 bug in Aria Operations for Networks

Security AffairsJun 7, 21:02 UTC · Jun 7, 2023VulnerabilityCVE-2023-20887 CVE-2023-20888 CVE-2023-20889+21 · 1 read

60

Week in review: PaperCut vulnerabilities, VMware fixes critical flaws, RSA Conference 2023

Help Net SecurityApr 30, 00:00 UTC · Apr 30, 2023VulnerabilityCVE-2023-27524 CVE-2023-20869 CVE-2023-20870+42 · 1 read

60

VMware Releases Critical Patches for Workstation and Fusion Software

The Hacker NewsApr 26, 13:10 UTC · Apr 26, 2023VulnerabilityCVE-2023-20869 CVE-2023-20870 CVE-2023-20871+22 · 1 read

60

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

The Hacker NewsApr 21, 05:41 UTC · Apr 21, 2023VulnerabilityCVE-2023-20036 CVE-2023-20039 CVE-2023-20154+42 · 1 read

60

A critical flaw in VMware vRealize allows executing code as root

Security AffairsApr 20, 22:20 UTC · Apr 20, 2023VulnerabilityCVE-2023-20864 CVE-2023-208652 · 1 read

60