CVE-2021-35486

CVE-2021-35486 affects Nokia IMPACT up to version 19.11.2.10-20210118042150283. The issue is a CSRF vulnerability in the /ui/rest-proxy/entity/import endpoint where neither the X-CSRF-NONCE header nor the CSRF-NONCE cookie is validated, allowing a remote attacker to import and overwrite the entir...

CVE-2021-35485

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the...

EUVD-2019-7808

Malware in sbrugna...

EUVD-2019-7807

Malware in sbrugna...

EUVD-2019-7805

Malware in sbrugna...

EUVD-2019-7806

Malware in sbrugna...

CVE-2019-17405

Nokia IMPACT 18A: has Reflected self XSS...

CVE-2019-17403

Nokia IMPACT 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution...

CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

CVE-2019-17406

Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...

Nokia IMPACT Path Traversal Vulnerability

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A path traversal vulnerability exists in Nokia IMPACT. The vulnerability arises from a failure of a networked system or product to properly filter special elements in a...

Nokia IMPACT Code Issue Vulnerability

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A code issue vulnerability exists in Nokia IMPACT. An attacker could exploit the vulnerability to execute code...

Nokia IMPACT Cross-Site Scripting Vulnerability

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A cross-site scripting vulnerability exists in Nokia IMPACT. The vulnerability stems from the lack of proper validation of client-side data by the web application. An attacke...

Nokia IMPACT path traversal vulnerability (CNVD-2019-44224)

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A path traversal vulnerability exists in Nokia IMPACT. An attacker can exploit this vulnerability to disclose the full path...

CVE-2019-17406

Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...

CVE-2019-17406

Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...

Path traversal

Nokia IMPACT 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...

CVE-2019-17405

Nokia IMPACT 18A: has Reflected self XSS...

CVE-2019-17403

Nokia IMPACT 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution...

CVE-2019-17405

Nokia IMPACT 18A: has Reflected self XSS...