7 matches found
CVE-2019-17404
CVE-2019-17404 concerns Nokia IMPACT before version 18A, where a path traversal flaw allows an attacker to disclose the full filesystem path. The issue is described across multiple sources (CNVD-2019-44224, Red Hat RH:CVE-2019-17404, NVD CVE-2019-17404). The connected documents do not provide exp...
CVE-2019-17405
CVE-2019-17405 affects Nokia IMPACT platforms earlier than version 18A, with a reflected self-XSS vulnerability. Connected sources identify Nokia IMPACT as the affected product and attribute the issue to improper validation of client-side data by the web application, enabling an attacker to execu...
CVE-2019-17403
CVE-2019-17403 : Nokia IMPACT versions prior to 18A contain an unrestricted file upload vulnerability that could enable remote code execution. The cited descriptions consistently state this vulnerability for Nokia IMPACT, with no explicit exploit details or affected subcomponents beyond the gener...
CVE-2021-35484
Nokia IMPACT versions through 19.11.2.10-20210118042150283 are vulnerable to a Time-based Boolean Blind SQL Injection attack. The flaw exists in the sortColumn HTTP GET parameter on the /ui/rest-proxy/campaign/statistic endpoint (used by the View Campaign page). An authenticated user can exploit ...
CVE-2021-35483
The Applications component of Nokia IMPACT (versions through 19.11.2.10-20210118042150283 ) is vulnerable to an arbitrary file upload flaw. An authenticated user can upload malicious JavaScript files via the /ui/rest-proxy/application fileupload parameter while adding or editing an application. I...
CVE-2021-35485
The Applications component of Nokia IMPACT (version through 19.11.2.10-20210118042150283 ) is vulnerable to an unrestricted file upload. An authenticated user can arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This vulnerability can be tri...