Known vulnerabilities in NSX 4.0.1.1

Vendor: Broadcom
Software: NSX
Version: 4.0.1.1
Software CPE: cpe:2.3:a:broadcom:nsx-t:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting NSX version 4.0.1.1 NSX 4.0.1.1 is affected by 8 vulnerabilities: 1 medium, 7 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116195 - Exposure of sensitive information to an unauthorized actor
CVE-2025-41252
CWE-200 Low
No
No
3.2.4.3, 4.1.2.7, 4.2.2.2, 4.2.3.1 30.09.2025 SB2025093032
#VU116194 - Weak password recovery mechanism
CVE-2025-41251
CWE-640 Low
No
No
3.2.4.3, 4.1.2.7, 4.2.2.2, 4.2.3.1 30.09.2025 SB2025093032
#VU110209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22245
CWE-79 Low
No
No
4.1.2.6, 4.2.1.4, 4.2.2.1 05.06.2025 SB2025060512
#VU110208 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22244
CWE-79 Low
No
No
4.1.2.6, 4.2.1.4, 4.2.2.1 05.06.2025 SB2025060512
#VU110207 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22243
CWE-79 Low
No
No
4.1.2.6, 4.2.1.4, 4.2.2.1 05.06.2025 SB2025060512
#VU98756 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-38815
CWE-451 Low
No
No
4.2.1.0 16.10.2024 SB20241016101
#VU98755 - Improper Privilege Management
CVE-2024-38818
CWE-269 Medium
No
No
4.2.1.0 16.10.2024 SB20241016101
#VU98754 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-38817
CWE-78 Low
No
No
3.2.4.1, 4.2.1.0 16.10.2024 SB20241016101