CVE-2021-35484 - CVE House
Back to Database
Status published Unknown CVE-2021-35484

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform...

Vulnerability Description

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive data from the database and obtain access to the database user, database name, and database version information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-35484

Credits & Attribution

No credits recorded in the NVD database.

References

More from nokia

View All →
CVE-2022-43675
An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS...
Medium 6.1
CVE-2022-41763
An issue was discovered in NOKIA AMS 9.7.05. Remote Code...
High 8.8
CVE-2022-41762
An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected...
Medium 6.1
CVE-2022-41761
An issue was discovered in NOKIA NFM-T R19.9. An Absolute...
Medium 6.5
CVE-2022-41760
An issue was discovered in NOKIA NFM-T R19.9. Relative Path...
Medium 6.5

Affected Vendor

Affected Software

impact
Vulnerable Versions:
0

Timeline

Official Publish: March 3rd, 2026
Last Modified: March 4th, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.