Approved changes feed: RSS · Atom

cpe:2.3:a:ericsson:network_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEricsson (198bbf36-f632-548c-bd14-c61a678abe8e)
ProductNetwork Manager (8e37126c-a50a-5651-b1b5-7cc10d9f5b4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27259 vulnerable 2026-06-08 07:14:54.600350 Ericsson Network Manager: improper neutralization of user controlled input
Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.
Published: 2025-10-13T06:16:37.104Z
Updated: 2025-10-14T16:06:38.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27258 vulnerable 2026-06-08 07:14:54.599924 Ericsson Network Manager: escalation of privilege vulnerability
Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege.
Published: 2025-10-13T06:25:32.326Z
Updated: 2025-10-14T15:29:59.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25007 vulnerable 2026-06-08 06:29:42.170891 Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability
HIGH (7.1)
Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The attacker on the adjacent network with administration access can exploit the vulnerability.
Published: 2024-04-04T18:25:21.681Z
Updated: 2024-08-01T23:36:21.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39909 vulnerable 2026-06-08 06:09:38.074841 Details available
Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application.
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-08-02T18:18:09.874Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46408 vulnerable 2026-06-08 05:50:38.866041 Details available
Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker would need admin/elevated access to exploit the vulnerability.
Published: 2023-06-29T00:00:00.000Z
Updated: 2024-11-27T14:31:43.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46407 vulnerable 2026-06-08 05:50:38.865446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32570 vulnerable 2026-06-08 05:32:07.457701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28488 vulnerable 2026-06-08 05:31:24.402838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.