High severity · published Feb 22, 2023
CVE-2023-20855
VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability
8.8
CVSS
1.3%
EPSS
No
On KEV
Description
VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious actor, with non-administrative access to vRealize Orchestrator, may be able to use specially crafted input to bypass XML parsing restrictions leading to access to sensitive information or possible escalation of privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VA
Vrealize Automation · Vmware
8.0 before 8.11.1 · source: NVD
VO
Vrealize Orchestrator · Vmware
8.0 before 8.11.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20855
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20855
Patch
https://www.vmware.com/security/advisories/VMSA-2023-0005.html
More from Vrealize Automation
9.8
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
7.8
CVE-2022-22960
VMware Multiple Products Privilege Escalation Vulnerability
9.8
CVE-2022-22972
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users
9.8
CVE-2022-22956
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework
9.8
CVE-2022-22955
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework