Unscored severity · published Sep 15, 2014
CVE-2014-3796
VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain…
–
CVSS
1.6%
EPSS
No
On KEV
Description
VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nsx · Vmware
6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5 · source: NVD
VN
Vcloud Networking And Security · Vmware
5.1; 5.1.1; 5.1.2; 5.1.3; 5.1.4; 5.1.4.1; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3796
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3796
secunia.com
http://secunia.com/advisories/59938
www.securitytracker.com
http://www.securitytracker.com/id/1030835
Patch
http://www.vmware.com/security/advisories/VMSA-2014-0009.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95926
More from Nsx
8.1
CVE-2025-41251
Weak password recovery vulnerability
7.5
CVE-2025-41252
Username enumeration vulnerability
6.7
CVE-2024-38818
VMware NSX contains a local privilege escalation vulnerability. An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role…
6.7
CVE-2024-38817
VMware NSX contains a command injection vulnerability. A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary…
4.3
CVE-2024-38815
VMware NSX contains a content spoofing vulnerability. An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain…