Approved changes feed: RSS · Atom

cpe:2.3:a:nokia:1350_optical_management_system:14.2:*:*:*:*:*:*:*

part: a version: 14.2 update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
Product1350 Optical Management System (550d17ff-41bb-5bcb-aafb-15880f6e15ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40715 vulnerable 2026-06-08 05:48:28.006752 Details available
An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
Published: 2022-09-19T15:52:39.000Z
Updated: 2024-08-03T12:21:46.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40714 vulnerable 2026-06-08 05:48:28.006479 Details available
An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints.
Published: 2022-09-19T15:52:33.000Z
Updated: 2024-08-03T12:21:46.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40713 vulnerable 2026-06-08 05:48:28.006083 Details available
An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
Published: 2022-09-19T15:52:28.000Z
Updated: 2025-06-03T18:20:00.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40712 vulnerable 2026-06-08 05:48:28.005589 Details available
An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.
Published: 2022-09-19T15:52:24.000Z
Updated: 2025-06-03T18:19:05.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39821 vulnerable 2026-06-08 05:47:18.825646 Details available
In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.
Published: 2022-09-13T20:36:27.000Z
Updated: 2024-08-03T12:07:42.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39819 vulnerable 2026-06-08 05:47:18.825097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39817 vulnerable 2026-06-08 05:47:18.822511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39816 vulnerable 2026-06-08 05:47:18.822240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39815 vulnerable 2026-06-08 05:47:18.821830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39814 vulnerable 2026-06-08 05:47:18.821284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.