CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security@vmware.com

Published

2025-06-04

Last modified

2025-06-04

Weaknesses

CWE-79

Affected products

• Vmware Nsx (Broadcom)
• Cloud Foundation (Vmware)
• Telco Cloud Infrastructure (Vmware)
• Telco Cloud Platform (Vmware)
• Vmware Nsx (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25738