Vulnerabilities > Nokia > Network Functions Manager FOR Transport > High

DATE CVE VULNERABILITY TITLE RISK
2023-12-25 CVE-2022-39818 OS Command Injection vulnerability in Nokia Network Functions Manager for Transport 19.9
In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter.
network
low complexity
nokia CWE-78
8.8
2023-12-25 CVE-2022-39822 SQL Injection vulnerability in Nokia Network Functions Manager for Transport 19.9
In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter.
network
low complexity
nokia CWE-89
8.8