CVE-2025-27259 — Ericsson Network Manager: improper neutralization of user controlled input

CVE-2025-27259

Ericsson Network Manager: improper neutralization of user controlled input PUBLISHED

Description (CNA)

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.

Affected (CNA)

Vendor / product	Versions
Ericsson / Ericsson Network Manager(ENM)	affected 0 before all versions prior to 25.2

CWE

CWE-79

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-enm-october-2025

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.