cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2022-40715,https://securityvulnerability.io/vulnerability/CVE-2022-40715,,"An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.",Nokia,1350 Optical Management System,6.5,MEDIUM,0.0011500000255182385,false,false,false,false,,false,false,2022-09-19T15:52:39.000Z,0 CVE-2022-40714,https://securityvulnerability.io/vulnerability/CVE-2022-40714,,An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints.,Nokia,1350 Optical Management System,6.1,MEDIUM,0.0005699999746866524,false,false,false,false,,false,false,2022-09-19T15:52:33.000Z,0 CVE-2022-40713,https://securityvulnerability.io/vulnerability/CVE-2022-40713,,"An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.",Nokia,1350 Optical Management System,6.5,MEDIUM,0.0011500000255182385,false,false,false,false,,false,false,2022-09-19T15:52:28.000Z,0 CVE-2022-40712,https://securityvulnerability.io/vulnerability/CVE-2022-40712,,An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.,Nokia,1350 Optical Management System,6.1,MEDIUM,0.0005699999746866524,false,false,false,false,,false,false,2022-09-19T15:52:24.000Z,0 CVE-2022-39814,https://securityvulnerability.io/vulnerability/CVE-2022-39814,,"In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter.",Nokia,1350 Optical Management System,6.1,MEDIUM,0.0005699999746866524,false,false,false,false,,false,false,2022-09-13T20:36:57.000Z,0 CVE-2022-39815,https://securityvulnerability.io/vulnerability/CVE-2022-39815,,"In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operating system.",Nokia,1350 Optical Management System,9.8,CRITICAL,0.002240000059828162,false,false,false,false,,false,false,2022-09-13T20:36:50.000Z,0 CVE-2022-39816,https://securityvulnerability.io/vulnerability/CVE-2022-39816,,"In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page. Exploitation requires an authenticated attacker.",Nokia,1350 Optical Management System,6.5,MEDIUM,0.0006300000241026282,false,false,false,false,,false,false,2022-09-13T20:36:45.000Z,0 CVE-2022-39817,https://securityvulnerability.io/vulnerability/CVE-2022-39817,,"In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL statements, a potential authenticated attacker can modify query syntax and perform unauthorized (and unexpected) operations against the remote database.",Nokia,1350 Optical Management System,8.8,HIGH,0.0009500000160187483,false,false,false,false,,false,false,2022-09-13T20:36:39.000Z,0 CVE-2022-39819,https://securityvulnerability.io/vulnerability/CVE-2022-39819,,"In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system.",Nokia,1350 Optical Management System,8.8,HIGH,0.0008699999889358878,false,false,false,false,,false,false,2022-09-13T20:36:33.000Z,0 CVE-2022-39821,https://securityvulnerability.io/vulnerability/CVE-2022-39821,,"In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.",Nokia,1350 Optical Management System,7.5,HIGH,0.0012600000482052565,false,false,false,false,,false,false,2022-09-13T20:36:27.000Z,0