VMware Nsx Edge vulnerabilities

2 CVEs affecting VMware Nsx Edge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-4929, published 2017-11-17.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-2079, published 2016-07-03. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified…
• CVE-2017-4929, published 2017-11-17. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure.