CVE-2022-39822

2023-12-2500:00:00

mitre

www.cve.org

cve-2022-39822

sql injection

nokia

vm manager

webui

authenticated

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter. An authenticated attacker is required for exploitation.

References

www.gruppotim.it/it/footer/red-team.html