NM
Product
Network Manager
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 5Low 0
Watch
Add Network Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27258 | 9.8 | Oct 13 | Ericsson Network Manager: escalation of privilege vulnerability Affected: before 25.1 |
| CVE-2023-39909 | 8.8 | Dec 7 | Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application Affected: before 23.2 |
| CVE-2024-25007 | 7.1 | Apr 4 | Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a… Affected: before 23.1 |
| CVE-2022-46408 | 6.8 | Jun 29 | Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula… Affected: before 22.1 |
| CVE-2021-28488 | 6.5 | Mar 10 | Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly… Affected: before 21.2 |
| CVE-2025-27259 | 5.4 | Oct 13 | Ericsson Network Manager: improper neutralization of user controlled input Affected: before 25.2 |
| CVE-2021-32570 | 4.9 | Aug 26 | In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from certain log files Affected: before 21.2 |
| CVE-2022-46407 | 4.8 | Jun 29 | Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to… Affected: before 22.2 |
Showing 8