Nokia Electronic Documentation vulnerabilities

3 CVEs affecting Nokia Electronic Documentation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0803, published 2003-10-06.

More from Nokia.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2003-0801, published 2003-10-06. Medium severity, CVSS 4.3. EPSS: 12.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that…
• CVE-2003-0802, published 2003-10-06. Medium severity, CVSS 5.0. EPSS: 6.6% chance of exploitation in the next 30 days. Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a…
• CVE-2003-0803, published 2003-10-06. High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days. Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.