Skip to content
CVE PROGRAM SOURCE RECORD2.4 Low

CVE-2025-27259

Ericsson Network Manager: improper neutralization of user controlled input

Description

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ericsson Ericsson Network Manager(ENM)

Default version status: unaffected

  • 0 to < all versions prior to 25.2affected

References