Nokia Cbis,ncs
2 CVEs affecting Nokia Cbis,ncs. Latest disclosed: 2025-09-18. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-49564 | High | 8.8 | 2025-09-18 | The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized a… |
CVE-2023-49565 | High | 8.4 | 2025-09-18 | The cbis_manager Podman container is vulnerable to remote command execution via the /api/plugins endpoint. Improper sanitization of the HTTP Headers X-FILENAME… |