vmware nsx data center vulnerabilities and exploits

(subscribe to this query)

VMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access to an NSX-Edge appliance can execute arbitrary commands on the operating system as root.

Vmware Cloud Foundation Vmware Nsx Data Center

VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.

Vmware Cloud Foundation Vmware Nsx Data Center

NSX-T contains a reflected cross-site scripting vulnerability due to a lack of input validation. A remote attacker can inject HTML or JavaScript to redirect to malicious pages.

Vmware Nsx-t Data Center

VMware NSX-T (3.x prior to 3.0.2, 2.5.x prior to 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install packages from NSX manager. A malicious actor with MITM positioning may be able to exploit this issue to compromise the...

Vmware Cloud Foundation Vmware Nsx-t Data Center

1 Article

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the...

Xstream Project Xstream Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0 Oracle Utilities Framework 4.2.0.3.0 Oracle Utilities Framework 4.2.0.2.0 Oracle Utilities Framework 4.3.0.6.0 Oracle Utilities Framework 4.4.0.0.0 Oracle Communications Unified Inventory Management 7.3.4 Oracle Communications Unified Inventory Management 7.3.5 Oracle Communications Unified Inventory Management 7.4.0 Oracle Webcenter Portal 12.2.1.4.0 Oracle Utilities Framework 4.4.0.2.0 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0 Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2

3 Github repositories2 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook