CVE-2021-35485 - CVE House
Back to Database
Status published Unknown CVE-2021-35485

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows...

Vulnerability Description

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an existing one.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-35485

Credits & Attribution

No credits recorded in the NVD database.

References

More from nokia

View All →
CVE-2022-43675
An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS...
Medium 6.1
CVE-2022-41763
An issue was discovered in NOKIA AMS 9.7.05. Remote Code...
High 8.8
CVE-2022-41762
An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected...
Medium 6.1
CVE-2022-41761
An issue was discovered in NOKIA NFM-T R19.9. An Absolute...
Medium 6.5
CVE-2022-41760
An issue was discovered in NOKIA NFM-T R19.9. Relative Path...
Medium 6.5

Affected Vendor

Affected Software

impact
Vulnerable Versions:
0

Timeline

Official Publish: March 3rd, 2026
Last Modified: March 4th, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.