CVE-2022-43675

6.1MEDIUM

Key Information

Vendor: Nokia
Status: Network Functions Manager For Transport
Vendor: CVE Published:; 25 December 2023

Summary

An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename parameter, under /oms1350/pages/otn/connection/E2ERoutingDisplayWithOverLay via the id parameter, and under /oms1350/pages/otn/mainOtn via all parameters.

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
Dec 25, 2023
Vulnerability Reserved.
Oct 24, 2022

Collectors

NVD DatabaseMitre Database