Approved changes feed: RSS · Atom

cpe:2.3:a:nokia:broadcast_message_center:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNokia (817976ae-06c5-5680-b3fe-e55f44d8308a)
ProductBroadcast Message Center (a5fd1140-433b-53c3-a0d1-5e662ec60f14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35487 vulnerable 2026-06-08 05:32:48.765178 Details available
Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user, database name, and database version information, and potentially database data.
Published: 2022-05-25T13:41:38.000Z
Updated: 2024-08-04T00:40:46.310Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.