VMware Nsx Data Center vulnerabilities

2 CVEs affecting VMware Nsx Data Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31678, published 2022-10-28.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-31678, published 2022-10-28. Critical severity, CVSS 9.1. EPSS: 8.3% chance of exploitation in the next 30 days. VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a…
• CVE-2022-22945, published 2022-02-16. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access to an NSX-Edge appliance can execute arbitrary commands on the operating system as root.