Vulnerabilities reported in Site Recovery Manager with CVE-2025-38352, CVE-2025-38084 and CVE-2025-38085.

Products

• VMware Live Recovery

Issue/Introduction

A vulnerability scan has reported two CVEs related to VMware Site Recovery Manager (SRM):

CVE-2025-38352, CVE-2025-38084 and CVE-2025-38085.

Environment

VMware Live Site Recovery 9.x

Resolution

VMware By Broadcom is aware of CVE-2025-38352, CVE-2025-38084 and CVE-2025-38085.

Please refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.

Should you require further information please contact Broadcom Support