CVE-2025-41252

Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote,...

CVE-2025-41251

VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated...

CVE-2025-41252

Summary of CVE-2025-41252 ( VMware NSX Username Enumeration ) : An unauthenticated, remote attacker can enumerate valid usernames in affected VMware NSX deployments, potentially enabling unauthorized access. Affected products include VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x ; NSX-T 3.x ; and VMwar...

CVE-2025-41252 Username enumeration vulnerability

Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote,...

CVE-2025-41252 Username enumeration vulnerability

Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote,...

CVE-2025-41251 Weak password recovery vulnerability

VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated...

CVE-2025-41251

The CVE-2025-41251 issue concerns VMware NSX with a weak password recovery mechanism that allows an unauthenticated attacker to enumerate valid usernames, enabling potential credential brute-forcing. Affected products include VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x; NSX-T 3.x; and VMware Cloud Fo...

CVE-2025-41251 Weak password recovery vulnerability

VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated...

Trivision NC-227WF 安全漏洞

Trivision NC-227WF is a webcam from Trivision USA. A security vulnerability exists in Trivision NC-227WF version 5.80, which stems from a login mechanism that returns a different error message, potentially leading to username enumeration...

PT-2025-39856

Name of the Vulnerable Software and Affected Versions VMware NSX versions 4.0.x through 4.2.x VMware NSX versions 4.1.x VMware NSX-T versions 3.x VMware Cloud Foundation with NSX versions 4.5.x and 5.x VMware NSX version 9.x.x.x Description The software contains a weak password recovery mechanism...

PT-2025-39868

Name of the Vulnerable Software and Affected Versions VMware NSX versions 9.x.x.x VMware NSX versions 4.0.x through 4.2.x VMware NSX version 4.1.x NSX-T versions 3.x VMware Cloud Foundation with NSX versions 4.5.x and 5.x Description VMware NSX contains a username enumeration issue. A remote,...

VMware Cloud Foundation和VMware NSX 安全漏洞

VMware Cloud Foundation and VMware NSX are both products of VMware, Inc. VMware Cloud Foundation is an all-in-one hybrid cloud platform that includes capabilities for operations automation and infrastructure auto-configuration and integrated lifecycle management. VMware Cloud Foundation is an...

VMware Cloud Foundation和VMware NSX 安全漏洞

VMware NSX is a network virtualization solution within VMware Cloud Foundation that enables administrators to deploy legacy and modern applications in a private/hybrid cloud.VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware, Inc. The platform includes features such as...

CVE-2025-56764

Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames...

CVE-2025-56764

CVE-2025-56764 affects Trivision NC-227WF firmware 5.80 (build 20141010). The login mechanism returns distinct errors for unknown usernames vs. wrong passwords, enabling username enumeration over a network attack surface. Impact is username enumeration, which can facilitate targeted credential st...

CVE-2025-56764

Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames...

GHSA-W82P-R9VW-4RG5 WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

CVE-2025-1396

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

CVE-2025-1396

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...