CVE Feed

    Dashboard / CVE / CVE-2022-46408

    CVE-2022-46408

    Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker would need admin/elevated access to exploit the vulnerability.

    Published:Jun 29, 2023
    Last Modified:Nov 27, 2024
    EPS:Jun 29, 2023
    EPSS Score:0.01013
    CVSS Score:6.8

    Affected Products

    Vendor
    Ericsson
    Product
    Network Manager

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-27258 (CVSS 6.9) — Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result…
    CVE-2025-27259 (CVSS 2.4) — Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltr…
    CVE-2024-25007 (CVSS 7.1) — Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of ap…
    CVE-2023-39909 (CVSS 8.8) — Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users ca…
    CVE-2022-46407 (CVSS 4.8) — Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editpro…
    CVE-2021-32570 (CVSS 4.9) — In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group c…
    CVE-2021-28488 (CVSS 6.5) — Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High