Username Enumeration Vulnerability in VMware NSX and Products
CVE-2025-41252

7.5HIGH

Key Information:

Vendor

Vmware
Status
Nsx
Vendor
CVE Published:
29 September 2025

What is CVE-2025-41252?

VMware NSX is susceptible to a username enumeration vulnerability that allows unauthenticated attackers to identify valid usernames. This exploitation can facilitate unauthorized access attempts, potentially compromising sensitive information and systems. Mitigation is crucial to safeguard against remote threats as there are currently no workarounds available. Users are encouraged to patch to the latest fixed versions to enhance security.

Affected Version(s)

NSX VMware NSX 9.x.x.x, 4.2.x, 4.1.x, 4.0.x

NSX VMware NSX-T 3.x

NSX VMware Cloud Foundation (with NSX) 5.x, 4.5.x

References

https://https://support.broadcom.com/web/ecx/support-cont...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-41252 : Username Enumeration Vulnerability in VMware NSX and Products