Nokia Netact
12 CVEs affecting Nokia Netact. Latest disclosed: 2023-07-24. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30280 | High | 8.8 | 2023-07-24 | /SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with arbitrary privileges, even administrativ… |
CVE-2022-28864 | High | 8.8 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parame… |
CVE-2022-28863 | High | 8.8 | 2023-07-24 | An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload p… |
CVE-2023-26059 | Medium | 6.8 | 2023-04-24 | An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP file which, when processed, exploits S… |
CVE-2023-26061 | Medium | 6.8 | 2023-04-24 | An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inje… |
CVE-2023-26060 | Medium | 6.8 | 2023-04-24 | An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a client-side te… |
CVE-2023-26058 | Medium | 6.5 | 2023-04-25 | An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser config… |
CVE-2023-26057 | Medium | 6.5 | 2023-04-25 | An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and a proper XML parser… |
CVE-2021-26597 | Medium | 6.5 | 2021-03-25 | An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Site Configuration Tool web site section… |
CVE-2022-28867 | Medium | 5.4 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parame… |
CVE-2022-28865 | Medium | 5.4 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to i… |
CVE-2021-26596 | Medium | 5.4 | 2021-03-25 | An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and ex… |