Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2025-24815

An unrestricted file upload vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Nokia
Products
Mantaray Nm
CVE-2025-24816

An Improper Access Control vulnerability in Nokia MantaRay NM

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nokia
Products
Mantaray Nm
CVE-2025-7406

A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Nokia
Products
Mantaray Nm
CVE-2025-24818

An OS Command Injection vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search application.

CVSS 3.1 · 8 High EPSS 1.1% KEV · Not listed
Vendors
Nokia
Products
Mantaray Nm
CVE-2025-24819

A Relative Path Traversal vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nokia
Products
Mantaray Nm
CVE-2025-24817

An OS Command Injection vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Collector application.

CVSS 3.1 · 8 High EPSS 1.1% KEV · Not listed
Vendors
Nokia
Products
Mantaray Nm