CVE-2022-39817: Nokia 1350 Optical Management System

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL statements, a potential authenticated attacker can modify query syntax and perform unauthorized (and unexpected) operations against the remote database.

Affected products

• Nokia 1350 Optical Management System: version 14.2 only

Published 2022-09-13. Last modified 2026-06-17.