CVE-2024-25007

Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a CSV File can lead to code execution or information disclosure. There is limited impact to integrity and availability. The attacker on the adjacent network with administration access can exploit the vulnerability.

• CWE-1236
• CWE-1236

• https://www.ericsson.com/en/about-us/security/psirt/security-bulletin--ericsson-network-manager-march-2024Vendor Advisory
• https://www.ericsson.com/en/about-us/security/psirt/security-bulletin--ericsson-network-manager-march-2024Vendor Advisory

Published

Apr 4, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-25000A Path Traversal vulnerability in web component of Ivanti Av…8.8
• CVE-2024-25001Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID. Consul…
• CVE-2024-25002Command Injection in the diagnostics interface of the Bosch …8.8
• CVE-2024-25003KiTTY versions 0.76.1.13 and before is vulnerable to a stack…7.8
• CVE-2024-25004KiTTY versions 0.76.1.13 and before is vulnerable to a stack…7.8
• CVE-2024-25006XenForo before 2.2.14 allows Directory Traversal (with write…8.1
• CVE-2024-25008Ericsson RAN Compute and Site Controller 6610 contains a vul…6.8
• CVE-2024-25009Ericsson Packet Core Controller (PCC) contains a vulnerabili…6.5
• CVE-2024-2501The Hubbub Lite – Fast, Reliable Social Sharing Buttons plug…7.5
• CVE-2024-25010Ericsson RAN Compute and Site Controller 6610 contains in ce…8.8
• CVE-2024-25011Ericsson Catalog Manager and Ericsson Order Care APIs do not…5.3
• CVE-2024-25015IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could…7.5