{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-02T23:15:08.865","vulnerabilities":[{"cve":{"id":"CVE-2025-41252","sourceIdentifier":"security@vmware.com","published":"2025-09-29T19:15:35.317","lastModified":"2026-10-09T09:10:00.213","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts.\n\n\nImpact: Username enumeration → facilitates unauthorized access.\n\n\nAttack Vector: Remote, unauthenticated.\n\n\nSeverity: Important.\n\n\nCVSSv3: 7.5 (High).\n\n\nAcknowledgments: Reported by the National Security Agency.\n\n\nAffected Products:\n\n\n\n  *  VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x\n\n  *  NSX-T 3.x\n\n  *  VMware Cloud Foundation (with NSX) 5.x, 4.5.x\n\n\n\n\n\n\n\n\n\n\n\n\nFixed Versions: \n\n\n\n  *  NSX 9.0.1.0;  4.2.2.2/4.2.3.1 http://4.2.2.2/4.2.3.1 ; 4.1.2.7; NSX-T 3.2.4.3; CCF async patch (KB88287).\n\n\n\n\n\n\nWorkarounds: None."},{"lang":"es","value":"Descripción: VMware NSX contiene una vulnerabilidad de enumeración de nombres de usuario. Un actor malicioso no autenticado puede explotar esto para enumerar nombres de usuario válidos, lo que podría conducir a intentos de acceso no autorizados.\n\nImpacto: Enumeración de nombres de usuario ? facilita el acceso no autorizado.\n\nVector de Ataque: Remoto, no autenticado.\n\nSeveridad: Importante.\n\nCVSSv3: 7.5 (Alta).\n\nAgradecimientos: Reportado por la Agencia de Seguridad Nacional.\n\nProductos Afectados:\n\n  *  VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x\n  *  NSX-T 3.x\n  *  VMware Cloud Foundation (con NSX) 5.x, 4.5.x\n\nVersiones Corregidas:\n\n  *  NSX 9.0.1.0; 4.2.2.2/4.2.3.1 http://4.2.2.2/4.2.3.1 ; 4.1.2.7; NSX-T 3.2.4.3; parche asíncrono de CCF (KB88287).\n\nSoluciones Temporales: Ninguna."}],"affected":[{"source":"security@vmware.com","affectedData":[{"vendor":"VMware","product":"NSX","defaultStatus":"unaffected","versions":[{"version":"VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x","versionType":"custom","status":"affected"},{"version":"VMware NSX-T 3.x","versionType":"custom","status":"affected"},{"version":"VMware Cloud Foundation (with NSX) 5.x, 4.5.x","status":"affected"},{"version":"VMware NSX 9.0.1.0; 4.2.2.2/4.2.3.1; 4.1.2.7; NSX-T 3.2.4.3; CCF async patch (KB88287)","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-29T19:14:25.259914Z","id":"CVE-2025-41252","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@vmware.com","type":"Secondary","description":[{"lang":"en","value":"CWE-203"}]}],"references":[{"url":"https://https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150","source":"security@vmware.com"}]}}]}