nozominetworks has 6 CVEs on record between 2025 and 2026. The busiest recent month was May 2026 with 5. The median CVSS is 5.9 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-79 (5).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 0 prev 5
Weakness classes
Products
- cmc 6
Worst active — by depth score
CVE-2025-40904Medium· 6.5A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter36CVE-2025-40903Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter32CVE-2025-40902Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter32CVE-2025-40901Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter32CVE-2025-40891Medium· 4.7A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data26
nozominetworks vulnerabilities
CVEs affecting nozominetworks, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2025-40904Medium· 6.5A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter
A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML …
CVE-2025-40903Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter
A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious restore sche…
CVE-2025-40902Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter
A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a malicious user whose username contains HT…
CVE-2025-40901Medium· 5.9A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter
A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious identity containi…
CVE-2025-40900Medium· 4.6An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular te…
CVE-2025-40891Medium· 4.7A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data
A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two differ…