Approved changes feed: RSS · Atom

cpe:2.3:a:nokia:impact_mobile:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
ProductImpact Mobile (30d9e7fb-899f-5eb1-b1df-82e9036058fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35486 vulnerable 2026-06-08 05:32:48.763636 Details available
A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration. Specifically, in /ui/rest-proxy/entity/import, neither the X-CSRF-NONCE HTTP header nor the CSRF-NONCE cookie is validated.
Published: 2026-03-03T00:00:00.000Z
Updated: 2026-03-04T15:16:03.968Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.