Lucene search
K

185 matches found

RedhatCVE
RedhatCVE
added 2026/02/06 1:30 p.m.5 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References1
NVD
NVD
added 2026/02/05 8:16 a.m.4 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS0.00018EPSS
Exploits0References1
OSV
OSV
added 2026/02/05 8:16 a.m.2 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.8AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2026/02/05 7:13 a.m.8 views

CVE-2025-10258

Infinera DNA is affected by a time-based SQL injection vulnerability caused by insufficient input validation, potentially leaking sensitive information. The issue is described consistently across multiple feeds (NVD, Red Hat CVE, CIRCL sighting, CVE list, EUVD) as affecting Infinera DNA with time...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/05 7:13 a.m.4 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/05 7:13 a.m.1 views

EUVD-2025-206874

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/05 7:13 a.m.1 views

CVE-2025-10258 A time-based SQL Injection vulnerability in Infinera DNA

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

5.6AI score0.00018EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/05 7:13 a.m.21 views

CVE-2025-10258 A time-based SQL Injection vulnerability in Infinera DNA

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

0.00018EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.2 views

Infinera DNA 安全漏洞

Infinera DNA is a network management system developed by the American company Infinera. There is a security vulnerability in Infinera DNA, which stems from insufficient input validation, potentially leading to the exposure of sensitive information...

6.3CVSS5.8AI score0.00018EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/05 12:0 a.m.3 views

PT-2026-5869

Name of the Vulnerable Software and Affected Versions Infinera DNA affected versions not specified Description Infinera DNA is susceptible to a time-based SQL injection due to inadequate input validation. This flaw could lead to the disclosure of sensitive information. The vulnerability involves...

6.3CVSS5.7AI score0.00018EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/12/10 6:13 p.m.1 views

CVE-2025-26489

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

6.5CVSS6.8AI score0.0015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/09 9:33 a.m.3 views

CVE-2025-26487

Server-Side Request Forgery SSRF vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge...

8.6CVSS7.2AI score0.00044EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/09 9:33 a.m.4 views

CVE-2025-26488

Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

7.5CVSS7AI score0.00084EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/09 9:33 a.m.2 views

CVE-2025-27019

Remote shell service RSH in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS6.9AI score0.00059EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/09 9:33 a.m.2 views

CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.8AI score0.00222EPSS
Exploits0References1
NVD
NVD
added 2025/12/08 10:16 a.m.1 views

CVE-2025-27019

Remote shell service RSH in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS0.00059EPSS
Exploits0References1
NVD
NVD
added 2025/12/08 10:16 a.m.1 views

CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS0.00222EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 10:16 a.m.0 views

CVE-2025-27019

Remote shell service RSH in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.1AI score0.00059EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 10:16 a.m.1 views

CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.6AI score0.00222EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/08 9:26 a.m.2 views

CVE-2025-27020 Improper configuration of SSH service in Infinera MTC-9

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.4AI score0.00222EPSS
Exploits0References1
Rows per page
Query Builder