high8.8
CVE-2022-39817
In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs.
Impact
In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL statements, a potential authenticated attacker can modify query syntax and perform unauthorized (and unexpected) operations against the remote database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | 1350 Optical Management System | Version 14.2 |