CVE-2025-24938

The Nokia WaveSuite NOC platform is vulnerable to OS command injection due to insufficient validation of user input. Specifically, the web application allows unfiltered input to be passed to commands executed on the underlying operating system. This vulnerability can be triggered during the creat...

CVE-2025-24936

A command injection vulnerability exists in Nokia WaveSuite NOC (a unified operations and maintenance platform for optical networks) and potentially Apache Web Server (affected versions not specified). The flaw occurs because the web application allows unfiltered user input to be passed to comman...

CVE-2025-24937

A security vulnerability exists in Nokia WaveSuite NOC , an optical network unified operations platform. The flaw stems from the application's ability to include arbitrary files into a file that is both downloadable and executable by the web server. This allows an attacker to read local file syst...