CVE-2025-24936
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Insufficient Validation of Input in the URL
The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. An attacker with low privileged access to the application has the potential to execute commands on the operating system under the context of the webserver.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WaveSuite NOC
- Vendor
- Nokia
- Product
- WaveSuite NOC
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| WS-NOC 24.6, WS-NOC 23.6 and WS-NOC 23.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| WS-NOC 24.6 FP3 | unaffected | Unavailable | Unavailable | Unavailable | None listed |