An issue exists in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints.
nokia 1350 optical management system 14.2