CVE-2023-26059

An issue was discovered in Nokia NetAct before 22 SP1037

Medium · published April 24, 2023

CVSS v3.1
6.8
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP file which, when processed, exploits Stored XSS. The upload option of the Site Configuration tool does not validate the file contents. The application is in a demilitarised zone behind a perimeter firewall and without exposure to the internet. The attack can only be performed by an internal user.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.9th percentile
Published
2023-04-24T00:00Z
EPSS history
Timeline
  • 24 APR 00:00Z
    An issue was discovered in Nokia NetAct before 22 SP1037
    cvelistv5