Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-40464 1 Nokia 1 Nsp 2026-08-31 5.4 Medium
NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content.
CVE-2026-40465 1 Nokia 1 Nsp 2026-08-31 5.3 Medium
NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.