Nokia
Nokia Netact: vulnerabilidades y CVE
Nokia Netact tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-30280 | Alta (8.8) | 0.48% | — | 24 jul 2023 | /SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with arbitrary privileges, even administrative privileges. The application (even if it implements a CSRF… |
| CVE-2022-28867 | Media (5.4) | 0.45% | — | 24 jul 2023 | An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parameter in order to include JavaScript code, which is then… |
| CVE-2022-28865 | Media (5.4) | 0.45% | — | 24 jul 2023 | An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by… |
| CVE-2022-28864 | Alta (8.8) | 1.0% | — | 24 jul 2023 | An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parameter in order to include malicious code, which is then… |
| CVE-2022-28863 | Alta (8.8) | 1.3% | — | 24 jul 2023 | An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the… |
| CVE-2023-26058 | Media (6.5) | 0.49% | — | 25 abr 2023 | An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very… |
| CVE-2023-26057 | Media (6.5) | 0.49% | — | 25 abr 2023 | An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is… |
| CVE-2023-26059 | Media (5.4) | 0.37% | — | 24 abr 2023 | An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP file which, when processed, exploits Stored XSS. The upload option of the Site Configuration tool… |
| CVE-2023-26061 | Media (5.4) | 0.37% | — | 24 abr 2023 | An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inject XSS. Input validation was missing during creation of a… |
| CVE-2023-26060 | Alta (8.8) | 0.59% | — | 24 abr 2023 | An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a client-side template injection payload. Input validation is missing during… |
| CVE-2021-26597 | Media (6.5) | 1.4% | — | 25 mar 2021 | An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Site Configuration Tool web site section and arbitrarily upload potentially dangerous files without… |
| CVE-2021-26596 | Media (5.4) | 0.74% | — | 25 mar 2021 | An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism… |