Approved changes feed: RSS · Atom

cpe:2.3:a:nokia:network_functions_manager_for_transport:19.9:*:*:*:*:*:*:*

part: a version: 19.9 update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
ProductNetwork Functions Manager For Transport (575116be-26c2-5a1b-92e4-ed593157a55d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43675 vulnerable 2026-06-08 05:49:33.728091 Details available
An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename parameter, under /oms1350/pages/otn/connection/E2ERoutingDisplayWithOverLay via the id parameter, and under /oms1350/pages/otn/mainOtn via all parameters.
Published: 2023-12-25T00:00:00.000Z
Updated: 2024-11-26T14:59:00.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41762 vulnerable 2026-06-08 05:48:30.932243 Details available
An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the bench or pid parameter to top.pl, or the id parameter to easy1350.pl.
Published: 2023-12-25T00:00:00.000Z
Updated: 2024-08-03T12:49:43.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41761 vulnerable 2026-06-08 05:48:30.931973 Details available
An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.
Published: 2023-12-25T00:00:00.000Z
Updated: 2024-08-03T12:49:44.036Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41760 vulnerable 2026-06-08 05:48:30.931659 Details available
An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Network Element Manager via the filename parameter, allowing a remote authenticated attacker to read arbitrary files.
Published: 2023-12-25T00:00:00.000Z
Updated: 2024-08-03T12:49:44.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39822 vulnerable 2026-06-08 05:47:18.825988 Details available
In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter. An authenticated attacker is required for exploitation.
Published: 2023-12-25T00:00:00.000Z
Updated: 2024-09-09T19:55:55.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39820 vulnerable 2026-06-08 05:47:18.825375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39818 vulnerable 2026-06-08 05:47:18.824507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.