Nokia 1350 Optical Management System
10 CVEs affecting Nokia 1350 Optical Management System. Latest disclosed: 2022-09-19. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39815 | Critical | 9.8 | 2022-09-13 | In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operat… |
CVE-2022-39819 | High | 8.8 | 2022-09-13 | In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system. |
CVE-2022-39817 | High | 8.8 | 2022-09-13 | In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL… |
CVE-2022-39821 | High | 7.5 | 2022-09-13 | In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical informati… |
CVE-2022-40715 | Medium | 6.5 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a r… |
CVE-2022-40713 | Medium | 6.5 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing… |
CVE-2022-39816 | Medium | 6.5 | 2022-09-13 | In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page. Exploitation requires an… |
CVE-2022-40714 | Medium | 6.1 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints. |
CVE-2022-40712 | Medium | 6.1 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints. |
CVE-2022-39814 | Medium | 6.1 | 2022-09-13 | In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter. |