CBIS,NCS vulnerabilities

2 known vulnerabilities in CBIS,NCS from Nokia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  CBIS,NCS: Improper Neutralization of Special Elements used in a Command

  CVE-2023-49565Sep 18, 2025Nokia

  The cbis_manager Podman container is vulnerable to remote command execution via the /api/plugins endpoint. Improper sanitization of the HTTP Headers X-FILENAME, X-PAGE, and X-FIELD allows for command injection. These headers are directly utilized within the su

• 8.8 High severity

  CBIS,NCS: Authentication Bypass Using an Alternate Path or Channel

  CVE-2023-49564Sep 18, 2025Nokia

  The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the