CVE Feed

    Dashboard / CVE / CVE-2022-46407

    CVE-2022-46407

    Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM deployment. The attacker would need admin/elevated access to exploit the vulnerability

    Published:Jun 29, 2023
    Last Modified:Nov 27, 2024
    EPS:Jun 29, 2023
    EPSS Score:0.00088
    CVSS Score:4.8

    Affected Products

    Vendor
    Ericsson
    Product
    Network Manager

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-178 Cross-Site Flashing

    Related CVEs

    CVE-2025-27258 (CVSS 6.9) — Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result…
    CVE-2025-27259 (CVSS 2.4) — Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltr…
    CVE-2024-25007 (CVSS 7.1) — Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of ap…
    CVE-2023-39909 (CVSS 8.8) — Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users ca…
    CVE-2022-46408 (CVSS 6.8) — Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Co…
    CVE-2021-32570 (CVSS 4.9) — In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group c…
    CVE-2021-28488 (CVSS 6.5) — Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High