Known vulnerabilities in NSX

Vendor: Broadcom
Software: NSX
Software CPE: cpe:2.3:a:broadcom:nsx-t:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NSX NSX is affected by 12 known vulnerabilities: 1 critical, 1 high, 2 medium, 8 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116195 - Exposure of sensitive information to an unauthorized actor
CVE-2025-41252
CWE-200 Low
No
No
3.2.4.3, 4.1.2.7, 4.2.2.2, 4.2.3.1 30.09.2025 SB2025093032
#VU116194 - Weak password recovery mechanism
CVE-2025-41251
CWE-640 Low
No
No
3.2.4.3, 4.1.2.7, 4.2.2.2, 4.2.3.1 30.09.2025 SB2025093032
#VU110209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22245
CWE-79 Low
No
No
4.1.2.6, 4.2.1.4, 4.2.2.1 05.06.2025 SB2025060512
#VU110208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22244
CWE-79 Low
No
No
4.1.2.6, 4.2.1.4, 4.2.2.1 05.06.2025 SB2025060512
#VU110207 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22243
CWE-79 Low
No
No
4.1.2.6, 4.2.1.4, 4.2.2.1 05.06.2025 SB2025060512
#VU98756 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-38815
CWE-451 Low
No
No
4.2.1.0 16.10.2024 SB20241016101
#VU98755 - Improper Privilege Management
CVE-2024-38818
CWE-269 Medium
No
No
4.2.1.0 16.10.2024 SB20241016101
#VU98754 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-38817
CWE-78 Low
No
No
3.2.4.1, 4.2.1.0 16.10.2024 SB20241016101
#VU76450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-20868
CWE-79 Low
No
No
3.2.3.0 23.05.2023 SB2023052338
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
- 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU52326 - Permissions, Privileges, and Access Controls
CVE-2021-21981
CWE-264 Medium
No
No
3.1.2 19.04.2021 SB2021041912
#VU47752 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-3993
CWE-300 High
No
No
2.5.2.2, 3.0.2 20.10.2020 SB2020102045