Vulnerability Alert - VMware Cloud Foundation

VMWare published a security advisory that address two vulnerabilities (CVE-2021-39144 and CVE-2022-31678). These vulnerabilities affect all the VMware Cloud Foundation 3.x versions environment and VMware NSX-V instance prior to 6.4.14.
RCE vulnerability (CVE-2021-39144) affects VMware Cloud Foundation via XStream open source library. The CVE-2022-31678 addresses an XML External Entity (XXE) vulnerability.

Among other consequences, it allows a malicious actor to get remote code execution.

[1] https://www.vmware.com/security/advisories/VMSA-2022-0027.html

[2] https://kb.vmware.com/s/article/89809

[3] https://customerconnect.vmware.com/en/downloads/details?downloadGroup=NSXV_6414&productId=417&rPId=95448