Vulnerabilidades do Nokia Impact
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Nokia Impact: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:nokia:impact
CVE-2021-35485
Alta · 8.0
CWE-434 03/03/2026
Unrestricted Upload of File with Dangerous Type em Nokia Impact
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an existing one.
CVE-2021-35484
Alta · 8.2
CWE-89 03/03/2026
SQL Injection em Nokia Impact
Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive data from the database and obtain access to the database user, database name, and database version information.
CVE-2021-35483
Média · 4.1
CWE-79 03/03/2026
Cross-site Scripting (XSS) em Nokia Impact
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an existing one. If an authenticated user visits the web page where the file is published, the JavaScript code is executed.