VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.
2025-06-04T20:15:22.263
2025-07-14T17:22:22.200
Analyzed
CVSSv3.1: 6.9 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | broadcom | vmware_nsx | < 4.1.2.6 | Yes |
| Application | broadcom | vmware_nsx | < 4.2.1.4 | Yes |
| Application | broadcom | vmware_nsx | 4.2.2 | Yes |
| Application | vmware | cloud_foundation | ≤ 5.2.1.2 | Yes |
| Application | vmware | telco_cloud_infrastructure | ≤ 3.0 | Yes |
| Application | vmware | telco_cloud_platform | ≤ 5.0 | Yes |