Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
CVE

CVE-2022-31678

9.1
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description

VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
vmware cloud foundation (nsx-v)
Updated Nov 10, 2026View on NVD →
S4E scanner

VMWare Cloud Foundation NSX-V - XML External Entity (XXE)

VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure. References: https://srcincite.io/advisories/src-2022-0022/ https://www.vmware.com/security/advisories/VMSA-2022-0027.html https://nvd.nist.gov/vuln/detail/cve-2022-31678 Remediation: Update to the latest version of VMware Cloud Foundation with patched NSX-V component.

10 assets checked · domain, subdomain, ipv4

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →