Insights from the Field

Security analysis, platform hardening strategies, and lessons learned from real-world assessments.

VMware NSX Advisory VMSA-2025-0012: Stored XSS Vulnerabilities in VMware NSX Manager and Firewall

What Is It? On June 4, 2025, Broadcom issued Security Advisory VMSA-2025-0012 disclosing three stored cross-site scripting (XSS) vulnerabilities affecting VMware NSX. These flaws exist within the NSX Manager user interface, Gateway Firewall, and Router Port components. They are tracked as CVE-2025-22243, CVE-2025-22244, and CVE-2025-22245. These vulnerabilities impact multiple NSX versions including 4.1.x, 4.2.1.x, and 4.2.x, and extend to affected deployments of VMware Cloud

Demetrios Mustakas Jr.

Jun 5, 2025

Inside VMSA-2025-0010: What It Reveals About Trust, Privilege, and Hidden Risks in vSphere

Introduction On May 20, 2025, Broadcom (formerly VMware) released VMSA-2025-0010, a security advisory disclosing a set of newly discovered vulnerabilities affecting a wide range of VMware products, including vCenter Server, ESXi, Workstation, and Fusion. Unlike prior advisories that often spotlight a single critical issue, this release details four distinct vulnerabilities, each posing different operational and security implications depending on the platform and deployment. A

Demetrios Mustakas Jr.

May 22, 2025