CVE-2021-35487

Summary : CVE-2021-35487 affects Nokia Broadcast Message Center up to version 11.1.0. An authenticated user can perform a Boolean Blind SQL Injection on the /owui/block/send-receive-updates endpoint via the extIdentifier HTTP POST parameter, enabling retrieval of the database user, database name,...

CVE-2022-45899

Nokia Broadcast Message Center (BMC) versions prior to 13.1 are vulnerable to an OS command injection vulnerability (CVE-2022-45899). An unauthenticated remote attacker can execute arbitrary commands with root privileges by providing shell metacharacters in the Log Scanner Search Pattern field of...