← Database

CVE-2022-39822

HIGH CVSS: 8.8 Published: 2023-12-25 Modified: 2026-06-17

Description

In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter. An authenticated attacker is required for exploitation.

Affected Platforms

Nokia Network Functions Manager For Transport

Weakness Type

CWE-89, CWE-89

References