CVE-2025-27259

MediumCVSS 5.4

Published: 13/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.

Risk Assessment

An attacker can access sensitive data or redirect users to malicious sites, potentially leading to further attacks.

Recommendation

Update Ericsson Network Manager to version ENM 25.2 GA or later to eliminate the vulnerability.

Other vulnerabilities in Ericsson Network Manager

CVE-2025-27258Critical
Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability that, if exploited, can result in an escalation of privilege.

Original NVD description (English source)

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS