{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-12T07:16:13.429","vulnerabilities":[{"cve":{"id":"CVE-2025-22244","sourceIdentifier":"security@vmware.com","published":"2025-06-04T20:15:22.263","lastModified":"2025-07-14T17:22:22.200","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation."},{"lang":"es","value":"VMware NSX contiene una vulnerabilidad de Cross-Site Scripting (XSS) almacenado en el firewall de puerta de enlace debido a una validación de entrada incorrecta."}],"metrics":{"cvssMetricV31":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":4.7}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:vmware_nsx:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2","versionEndExcluding":"4.1.2.6","matchCriteriaId":"BA802D68-9739-4EF6-8A2A-841E5A30B747"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:vmware_nsx:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.1","versionEndExcluding":"4.2.1.4","matchCriteriaId":"2EA245FB-84B8-4B53-8697-029435CD793E"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:vmware_nsx:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ED3E4DA6-50BF-402E-AC32-29FB702C23DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*","versionStartIncluding":"4.5","versionEndIncluding":"5.2.1.2","matchCriteriaId":"1D2A1D50-E58C-4FB4-821E-CB17B4D6170C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:telco_cloud_infrastructure:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2","versionEndIncluding":"3.0","matchCriteriaId":"904AA81A-D1C3-4DAF-BB2C-C51FEDF5B3F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:telco_cloud_platform:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"5.0","matchCriteriaId":"E0E78094-639D-47D6-998B-4EB111E45D18"}]}]}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25738","source":"security@vmware.com","tags":["Vendor Advisory"]}]}}]}