CVE-2021-26596

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that...

CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

CVE-2021-26596

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that...

Code injection

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that...

CVE-2021-26596

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that...

CVE-2021-26596

The CVE-2021-26596 entry concerns Nokia NetAct 18A. A vulnerability exists where a malicious user can change the filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim’s web browser. The attack is typically delivered by placing the malicious content...

CVE-2021-26597

CVE-2021-26597 affects Nokia NetAct 18A. A remote user authenticated to the NetAct Web Page can upload arbitrary files via the Site Configuration Tool’s /netact/sct parameter with operation=upload, enabling potentially dangerous file uploads. According to NVD, CVSS v3.1 base score 6.5 (PR:L, I:H)...

Cross site scripting

Nokia IMPACT 18A: has Reflected self XSS...

CVE-2019-17405

CVE-2019-17405 affects Nokia IMPACT platforms earlier than version 18A, with a reflected self-XSS vulnerability. Connected sources identify Nokia IMPACT as the affected product and attribute the issue to improper validation of client-side data by the web application, enabling an attacker to execu...

CVE-2019-17405

Nokia IMPACT 18A: has Reflected self XSS...

CVE-2019-17404

CVE-2019-17404 concerns Nokia IMPACT before version 18A, where a path traversal flaw allows an attacker to disclose the full filesystem path. The issue is described across multiple sources (CNVD-2019-44224, Red Hat RH:CVE-2019-17404, NVD CVE-2019-17404). The connected documents do not provide exp...

CVE-2019-17403

CVE-2019-17403 : Nokia IMPACT versions prior to 18A contain an unrestricted file upload vulnerability that could enable remote code execution. The cited descriptions consistently state this vulnerability for Nokia IMPACT, with no explicit exploit details or affected subcomponents beyond the gener...