{"id":"CVE-2025-27259","title":"Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.","summary":"Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"ericsson","product":"network_manager","affected":["network_manager < 25.2"],"patched":["network_manager 25.2"],"published":"2025-10-13","updated":"2026-10-08","sourceUpdated":"2026-10-08T12:10:00.217","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-27259","references":[{"url":"https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-enm-october-2025","label":"85b1779b-6ecd-4f52-bcc5-73eac4659dcf"}],"tags":["nvd"],"epss":0.00204,"epssPercentile":0.0945,"ingestedAt":"2026-10-08T11:31:27.350Z","slug":"CVE-2025-27259","body":"## Overview\n\nEricsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains.\n\n## Affected\n\n- `network_manager < 25.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `network_manager 25.2`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}