Verification of vulnerabilities for VMware NSX

Products

• VMware NSX

Issue/Introduction

• VMware NSX does not include a native, built-in mechanism or public reporting of vulnerabilities.
• To identify security risks:
  
  • Utilize a Third-Party Scanner: Administrators must use an external, industry-standard third-party security scanner to audit the NSX appliances and environment.
  • Review Reports: Compare the scanner's output against official VMware Security Advisories to validate findings.
  • Critical issues will be documented under VMware Security Advisories - Refer to the link : https://www.broadcom.com/support/vmware-security-advisories 

Environment

VMware NSX

Resolution

VMware does not provide a static list of vulnerabilities for NSX.

Instead, security verification is achieved through active scanning and adherence to security advisories.

Additional Information

Reference Links : 

• Securing VMware® NSX 4.x  https://www.vmware.com/docs/securing-vmware-nsx
• VMware Security Advisories https://www.broadcom.com/support/vmware-security-advisories
• VMware External Vulnerability Response and Remediation Policy : https://docs.broadcom.com/doc/vmware-external-vulnerability-response-and-remediation-policy