What’s Vulnerable › Vulnerabilities

CVE-2020-4006: Multiple VMware Products Command Injection Vulnerability

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2021-11-03
• EPSS: 17.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-23 · updated 2026-06-17
• Weakness: CWE-78

Description

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

Affected products

• VMware Cloud Foundation: 4.0, 4.0.1
• VMware Identity Manager: 3.3.1, 3.3.2, 3.3.3
• VMware Identity Manager Connector: 3.3.1, 3.3.2, 3.3.3
• VMware One Access: 20.01, 20.10
• VMware Vrealize Suite Lifecycle Manager: from 8.0 through 8.2
• VMware Workspace One Access (Access), VMware Workspace One Access Connector (Access Connector), VMware Identity Manager (vIDM), VMware Identity Manager Connecto: Multiple

References

• https://www.vmware.com/security/advisories/VMSA-2020-0027.html
• https://www.kb.cert.org/vuls/id/724367
• https://www.vmware.com/security/advisories/VMSA-2020-0027.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4006

Get alerted when CVE-2020-4006 or the next vulnerability affects your stack