CVE-2023-20877

HIGH 8.8CVE-2023-20877 · Published 12/05/2023 · updated 17/06/2026

In short

CVE-2023-20877 is a HIGH (CVSS 8.8) vulnerability affecting cloud foundation (vmware), vrealize operations (vmware).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cloud foundation vmware	`≥ 4.0, ≤ 4.5`	No fix yet
vrealize operations vmware	`= 8.10.0= 8.6.0`	No fix yet

Description

VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution leading to privilege escalation.

References

vmware.com/security/advisories/VMSA-2023-0009.html · Vendor Advisory

More vulnerabilities in cloud foundation

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cloud foundation

vmware

≥ 4.0, ≤ 4.5

No fix yet

vrealize operations

vmware

= 8.10.0= 8.6.0

No fix yet

More vulnerabilities in cloud foundation

See all →