← Database

CVE-2022-31678

CRITICAL CVSS: 9.1 Published: 2022-10-28 Modified: 2026-06-17

Description

VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.

Affected Platforms

Vmware Nsx Data CenterVmware Cloud Foundation

Weakness Type

CWE-611, CWE-611

References