Network Manager
Ericsson · 8 CVEs
Ericsson Network Manager: escalation of privilege vulnerability
Oct 13, 2025
Ericsson Network Manager: improper neutralization of user controlled input
Oct 13, 2025
Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability
Apr 4, 2024
Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access…
Dec 7, 2023
Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivit…
Jun 29, 2023
Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” whe…
Jun 29, 2023
In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrie…
Aug 25, 2022
Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access…
Mar 8, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-27258 | Ericsson Network Manager: escalation of privilege vulnerability | MEDIUM | 0.30% | Oct 13, 2025 |
| CVE-2025-27259 | Ericsson Network Manager: improper neutralization of user controlled input | LOW | 0.20% | Oct 13, 2025 |
| CVE-2024-25007 | Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability | HIGH | 0.44% | Apr 4, 2024 |
| CVE-2023-39909 | Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application. | HIGH | 0.78% | Dec 7, 2023 |
| CVE-2022-46408 | Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutraliz… | MEDIUM | 0.92% | Jun 29, 2023 |
| CVE-2022-46407 | Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection c… | MEDIUM | 0.35% | Jun 29, 2023 |
| CVE-2021-32570 | In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from certain log files. All… | MEDIUM | 0.76% | Aug 25, 2022 |
| CVE-2021-28488 | Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already g… | MEDIUM | 1.12% | Mar 8, 2022 |
Showing 1 to 8 of 8 CVEs