VMware Nsx-T vulnerabilities

3 CVEs affecting VMware Nsx-T, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-38818, published 2024-10-09.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-38817, published 2024-10-09. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. VMware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary commands on the…
• CVE-2024-38815, published 2024-10-09. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. VMware NSX contains a content spoofing vulnerability.  An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain leading to sensitive…
• CVE-2024-38818, published 2024-10-09. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously…