I
nfinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information.
References
| Link | Resource |
|---|---|
| https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10258/ | Vendor Advisory |
Configurations
History
10 Feb 2026, 15:20
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Nokia infinera Dna
Nokia |
|
| References | () https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-10258/ - Vendor Advisory | |
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:nokia:infinera_dna:*:*:*:*:*:*:*:* |
05 Feb 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
05 Feb 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-05 08:16
Updated : 2026-02-26 22:20
NVD link : CVE-2025-10258
Mitre link : CVE-2025-10258
CVE.ORG link : CVE-2025-10258
JSON object : View
Products Affected
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')