CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...

CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...

CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...

CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting XSS attack due to improper input validation...

PT-2025-23843 · Vmware · Vmware Nsx Manager Ui

Name of the Vulnerable Software and Affected Versions: VMware NSX Manager UI affected versions not specified Description: The issue is related to a stored Cross-Site Scripting XSS attack due to improper input validation. This allows an attacker to inject malicious scripts into the system. No...

CISA's KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The list of vulnerabilities is below - CVE-2022-35914 CVSS score: 9.8 - Teclib GLPI Remote Code Execution...

VMware NSX Manager vulnerabilities being actively exploited in the wild

The Wallarm Detect team has found exploit attempts in the wild of CVE-2022-31678 and CVE-2021-39144. The original vulnerabilities were found in VMware NSX Manager at the end of last year, and can lead to remote code execution RCE by pre-authenticated attackers. The CVE-2022-31678 vulnerability wa...

Metasploit Weekly Wrap-Up

Pre-authenticated Remote Code Execution in VMware NSX Manager using XStream CVE-2021-39144 There’s nothing quite like a pre-authenticated remote code execution vulnerability in a piece of enterprise software. This week, community contributor h00die-gr3y added a module that targets VMware NSX...

CVE-2021-39144

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...