Cross-Site Scripting Vulnerability in VMware NSX Gateway Firewall
CVE-2025-22244
6.9MEDIUM
What is CVE-2025-22244?
VMware NSX has a vulnerability in its gateway firewall that allows for stored Cross-Site Scripting (XSS) attacks due to inadequate input validation. An attacker can exploit this flaw to inject malicious scripts into web pages viewed by unsuspecting users, potentially compromising the security of the application and sensitive data.
Affected Version(s)
VMware NSX VMware NSX 4.0.x, VMware NSX 4.1.x, VMware NSX 4.2.x