CVE-2022-31678

2022-10-2800:00:00

vmware

www.cve.org

cve-2022-31678

denial-of-service

information disclosure

vcf 3.x

nsx-v

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

JSON

VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Cloud Foundation (NSX-V)",
    "versions": [
      {
        "version": "3.11",
        "status": "affected"
      }
    ]
  }
]