Nokia

Records169All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high72CVSS 7.0–8.9

Exploited now

Nokia records in CISA KEV

No Nokia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Netact 12 records HIGH 1350 Optical Management System 10 records MEDIUM Hit 7300 Firmware 7 records MEDIUM Impact 7 records MEDIUM Network Functions Manager For Transport 7 records MEDIUM G-040w-q Firmware 6 records MEDIUM I-240w-q Gpon Ont Firmware 6 records MEDIUM Mantaray Nm 6 records LOW

Records

7 records in Impact · all components

TI-2019-12998 CVE-2019-17403 · GHSA-2hph-cvmc-q8vf

Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution.

MEDIUM 43

Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02542 Published 2019-11-25 No fix listed CWE-434

TI-2021-14222 CVE-2021-35484 · GHSA-xw9q-6q4j-fhcr

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform…

MEDIUM 41

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00267 Published 2026-03-03 No fix listed CWE-89

TI-2021-14223 CVE-2021-35485 · GHSA-m34p-fgjw-89x9

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283…

LOW 36

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parame…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2026-03-03 No fix listed CWE-434

TI-2019-13000 CVE-2019-17405 · GHSA-6v85-6qpj-f798

Nokia IMPACT < 18A: has Reflected self XSS

LOW 28

Nokia IMPACT < 18A: has Reflected self XSS

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00709 Published 2019-11-25 No fix listed CWE-79

TI-2019-13001 CVE-2019-17406 · GHSA-76c7-jr49-pvm9

Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743

LOW 26

Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01123 Published 2019-11-25 No fix listed CWE-22

TI-2019-12999 CVE-2019-17404 · GHSA-9jvc-3hjj-3jx7

Nokia IMPACT < 18A: allows full path disclosure

LOW 22

Nokia IMPACT < 18A: allows full path disclosure

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00973 Published 2019-11-25 No fix listed CWE-22

TI-2021-14221 CVE-2021-35483 · GHSA-9cmh-p698-cgr6

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283…

LOW 19

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter.

CVSS 3.1MEDIUM 4.1 Adjacent network Low privileges User interaction EPSS 0.00245 Published 2026-03-03 No fix listed CWE-79

Open these records in search →