SQL Injection Vulnerability in Infinera DNA Product from Nokia
CVE-2025-10258

6.3MEDIUM

Key Information:

Vendor

Nokia
Status
Infinera Dna
Vendor
CVE Published:
5 February 2026

What is CVE-2025-10258?

The Infinera DNA product from Nokia is exposed to an SQL injection vulnerability stemming from insufficient input validation processes. This imperfection can enable attackers to manipulate database queries, potentially leading to unauthorized access and leakage of sensitive information. Organizations utilizing the affected versions of Infinera DNA must prioritize patching and enhancing their input validation measures to safeguard against such exploitation.

Affected Version(s)

Infinera DNA Earlier than R24.2

Infinera DNA R24.2 and later

References

https://www.nokia.com/we-are-nokia/security/product-secur...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.