What’s Vulnerable › Vulnerabilities

CVE-2022-43675

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-25 · updated 2026-06-17
• Weakness: CWE-79

Description

An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename parameter, under /oms1350/pages/otn/connection/E2ERoutingDisplayWithOverLay via the id parameter, and under /oms1350/pages/otn/mainOtn via all parameters.

Affected products

• Nokia Network Functions Manager For Transport: 19.9

References

• https://www.gruppotim.it/redteam
• https://www.gruppotim.it/redteam

Get alerted when CVE-2022-43675 or the next vulnerability affects your stack