CVE-2023-20877

CVSS 3.1: 8.8 high
EPSS: <1%p49
Published: May 12, 2023 · May 12, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-20877 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution leading to privilege escalation.

Vendors: vmware

Products: cloud foundation, vrealize operations

Weakness: CWE-863

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story

Go Beyond the Headlines for Deeper Dives into the Cybercriminal Underground

The Hacker NewsJul 30, 09:59 UTC · Jul 30, 2024RansomwareExploitedCVE-2023-20877 CVE-2023-208871