Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-40464

A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Nokia

Description

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nokia NSP

  • 22.3affected
  • 22.6affected
  • 22.9affected
  • 22.11affected
  • 23.4affected
  • 23.8affected
  • 23.11affected
  • 24.4affected
  • 24.8affected
  • 24.11affected
  • 25.4affected
  • 25.8affected
  • 25.11affected
  • 24.11-SP15unaffected
  • 25.11-SP5unaffected
  • NSP 26.4 and laterunaffected

References