197 matches found
CVE-2025-41251
VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated...
CVE-2025-41252
Summary of CVE-2025-41252 ( VMware NSX Username Enumeration ) : An unauthenticated, remote attacker can enumerate valid usernames in affected VMware NSX deployments, potentially enabling unauthorized access. Affected products include VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x ; NSX-T 3.x ; and VMwar...
CVE-2025-41252 Username enumeration vulnerability
Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote,...
CVE-2025-41251 Weak password recovery vulnerability
VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated...
CVE-2025-41251
The CVE-2025-41251 issue concerns VMware NSX with a weak password recovery mechanism that allows an unauthenticated attacker to enumerate valid usernames, enabling potential credential brute-forcing. Affected products include VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x; NSX-T 3.x; and VMware Cloud Fo...
CVE-2025-41251 Weak password recovery vulnerability
VMware NSX contains a weak password recovery mechanism vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially enabling brute-force attacks. Impact: Username enumeration → credential brute force risk. Attack Vector: Remote, unauthenticated...
CVE-2025-22243
VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...
CVE-2025-22245
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...
CVE-2025-22244
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...
CVE-2025-22245
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...
CVE-2025-22244
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...
CVE-2025-22243
VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...
CVE-2025-22245
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...
CVE-2025-22243
VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...
CVE-2025-22245
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...
CVE-2025-22245
VMware NSX contains a stored XSS vulnerability in the router port due to improper input validation (CVE-2025-22245). The issue is addressed by VMware Broadcom VMSA-2025-0012/0012.1, with fixed versions listed for various NSX releases: NSX 4.2.2.1, 4.2.1.4, 4.1.2.6 (and NSX-T 3.2.4.2; higher-level...
CVE-2025-22245
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the router port due to improper input validation...
CVE-2025-22244
VMware NSX contains a stored Cross-Site Scripting XSS vulnerability in the gateway firewall due to improper input validation...
CVE-2025-22244
CVE-2025-22244 is a stored XSS in VMware NSX gateway firewall caused by improper input validation. Connected advisories confirm multiple NSX components are affected (gateway firewall among others) and provide fixed versions: NSX 4.2.2.1, NSX 4.2.1.4, and NSX 4.1.2.6 (and related NSX-T/Cloud Found...