9.1
Critical
CVE-2022-31678 VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability
Description
VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Cloud Foundation (NSX-V) | 3.11 | No fix stated |