PT-2025-41762 · Ericsson · Ericsson Network Manager

Published 2025-10-13 · Updated 2025-10-21 · CVE-2025-27259

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ericsson Network Manager versions prior to 25.2 GA

Description The software contains a flaw that could allow for the exfiltration of limited data or the redirection of users to other websites or domains.

Recommendations Update to version 25.2 GA or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-27259

Affected Products

Ericsson Network Manager

References · 6

• https://osv.dev/vulnerability/CVE-2025-27259 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27259 · Security Note
• https://ericsson.com/en/about-us/security/psirt/security-bulletin-enm-october-2025 · Vendor Advisory
• https://t.me/CVEtracker/34753 · Telegram Post
• https://t.me/cveNotify/139660 · Telegram Post
• https://t.me/cveNotify/138425 · Telegram Post