CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.

Score

CVSS 3.1 6.9 Medium

Status

Analyzed - security@vmware.com

Published

2025-06-04

Last modified

2025-06-04

Weaknesses

CWE-79

Affected products

• Vmware Nsx (Broadcom)
• Cloud Foundation (Vmware)
• Telco Cloud Infrastructure (Vmware)
• Telco Cloud Platform (Vmware)
• Vmware Nsx (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25738