Nokia Network Functions Manager For Transport
7 CVEs affecting Nokia Network Functions Manager For Transport. Latest disclosed: 2023-12-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39822 | High | 8.8 | 2023-12-25 | In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter. An auth… |
CVE-2022-39818 | High | 8.8 | 2023-12-25 | In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows… |
CVE-2022-41761 | Medium | 6.5 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the l… |
CVE-2022-41760 | Medium | 6.5 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Network Element Manager via the filename par… |
CVE-2022-39820 | Medium | 6.5 | 2023-12-25 | In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and /DEPOT/KE… |
CVE-2022-43675 | Medium | 6.1 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename paramet… |
CVE-2022-41762 | Medium | 6.1 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the benc… |