Approved changes feed: RSS · Atom
cpe:2.3:a:nokia:impact:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nokia (817976ae-06c5-5680-b3fe-e55f44d8308a) |
|---|---|
| Product | Impact (9c3f9910-f660-553f-a752-de16bbd1750b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-35485 |
vulnerable | 2026-06-08 05:32:48.761912 |
Details available
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an existing one.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-04T15:49:10.812Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35484 |
vulnerable | 2026-06-08 05:32:48.761622 |
Details available
Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive data from the database and obtain access to the database user, database name, and database version information.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-04T15:10:45.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35483 |
vulnerable | 2026-06-08 05:32:48.761175 |
Details available
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an existing one. If an authenticated user visits the web page where the file is published, the JavaScript code is executed.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-04T15:55:11.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17406 |
vulnerable | 2026-06-08 05:13:10.476400 |
Details available
Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743
Published: 2019-11-25T15:03:36.000Z
Updated: 2024-08-05T01:40:15.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17405 |
vulnerable | 2026-06-08 05:13:10.475994 |
Details available
Nokia IMPACT < 18A: has Reflected self XSS
Published: 2019-11-25T14:53:32.000Z
Updated: 2024-08-05T01:40:15.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17404 |
vulnerable | 2026-06-08 05:13:10.475583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17403 |
vulnerable | 2026-06-08 05:13:10.475046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.