CVE-2022-43675: Nokia Network Functions Manager For Transport

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename parameter, under /oms1350/pages/otn/connection/E2ERoutingDisplayWithOverLay via the id parameter, and under /oms1350/pages/otn/mainOtn via all parameters.

Affected products

• Nokia Network Functions Manager For Transport: version 19.9 only

Published 2023-12-25. Last modified 2026-06-17.