6.3Mittel
CVE-2025-10258A time-based SQL Injection vulnerability in Infinera DNA
Beschreibung
Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information.
Schwachstellentyp (CWE):
CWE-89
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Nokia | Infinera DNA | Earlier than R24.2, fixed R24.2 and later |
Referenzen und Patches
- Nokia Product Security Advisory Vendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:nokia:infinera_dna:*:*:*:*:*:*:*:*< r24.2