Nokia Wavesuite Noc vulnerabilities

3 CVEs affecting Nokia Wavesuite Noc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24938, published 2025-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-24936, published 2025-07-21. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible…
CVE-2025-24938, published 2025-07-21. High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days. The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high privileged access (administrator) to the application has the…
CVE-2025-24937, published 2025-07-21. Critical severity, CVSS 9.0. EPSS: 0.3% chance of exploitation in the next 30 days. File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise of the web application and the…