CVE-2025-22245

Summary

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.

Affected Software

VendorProductVersion RangeStatus
VMwareVMware NSXVMware NSX 4.0.x, VMware NSX 4.1.x, VMware NSX 4.2.xaffected

Weaknesses

  • Stored Cross-Site Scripting (XSS) vulnerability in router port

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References