Broadcom VMware Nsx-T Data Center vulnerabilities

3 CVEs affecting Broadcom VMware Nsx-T Data Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20868, published 2023-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3993, published 2020-10-20. Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days. VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install packages from NSX manager. A malicious…
CVE-2023-20868, published 2023-05-26. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. NSX-T contains a reflected cross-site scripting vulnerability due to a lack of input validation. A remote attacker can inject HTML or JavaScript to redirect to malicious pages.
CVE-2021-21981, published 2021-04-19. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local…