An issue exists in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.
nokia 1350 optical management system 14.2