CVE-2025-22243NVD

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.

Severity Level

HIGH(7.5)

Published Date

Jun 4, 2025

Last Modified

Jul 14, 2025

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

The software does not neutralize user-controllable input before it is placed in output that is used as a web page.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredHigh

User InteractionRequired

ScopeChanged

ConfidentialityLow

IntegrityLow

AvailabilityHigh

CVE Watchtower