Username enumeration vulnerability

7.5 CVSS

Vulnerability Description

Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote, unauthenticated. Severity: Important. CVSSv3: 7.5 (High). Acknowledgments: Reported by the National Security Agency. Affected Products: * VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x * NSX-T 3.x * VMware Cloud Foundation (with NSX) 5.x, 4.5.x Fixed Versions: * NSX 9.0.1.0; 4.2.2.2/4.2.3.1 http://4.2.2.2/4.2.3.1 ; 4.1.2.7; NSX-T 3.2.4.3; CCF async patch (KB88287). Workarounds: None.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41252

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150

More from VMware

View All →

CVE-2025-41254

Spring Framework STOMP CSRF Vulnerability

Medium 4.3

CVE-2025-41253

Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables

High 7.5

CVE-2025-41250

Header injection vulnerability

High 8.5

CVE-2025-41249

CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

High 7.5

CVE-2025-41248

CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types

High 7.5

Affected Vendor

VMware

View all reports →

Affected Software

NSX

Vulnerable Versions:

VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x, VMware NSX-T 3.x, VMware Cloud Foundation (with NSX) 5.x, 4.5.x, VMware NSX 9.0.1.0; 4.2.2.2/4.2.3.1; 4.1.2.7; NSX-T 3.2.4.3; CCF async patch (KB88287)