Network Functions Manager For Transport vulnerabilities

2 known vulnerabilities in Network Functions Manager For Transport from Nokia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Network Functions Manager For Transport: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-39822Dec 25, 2023Nokia

  In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter. An authenticated attacker is required for exploitation.

• 8.8 High severity

  Network Functions Manager For Transport: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-39818Dec 25, 2023NokiaEPSS 2.24%

  In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.