Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Nokia Component: Impact Clear all filters
TI-2021-14223 CVE-2021-35485 · GHSA-m34p-fgjw-89x9

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283…

Priority LOW 36

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parame…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2026-03-03 No fix listed CWE-434
TI-2021-14222 CVE-2021-35484 · GHSA-xw9q-6q4j-fhcr

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform…

Priority MEDIUM 41

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00267 Published 2026-03-03 No fix listed CWE-89
TI-2021-14221 CVE-2021-35483 · GHSA-9cmh-p698-cgr6

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283…

Priority LOW 19

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter.

CVSS 3.1MEDIUM 4.1 Adjacent network Low privileges User interaction EPSS 0.00245 Published 2026-03-03 No fix listed CWE-79