Nokia Wavesuite Noc — known CVE vulnerabilities

Every CVE whose affected-product data names Nokia Wavesuite Noc, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-24936 — CVSS 9.0 (critical): The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component…
• CVE-2025-24937 — CVSS 9.0 (critical): File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading…
• CVE-2025-24938 — CVSS 8.4 (high): The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high…