Nokia Impact — known CVE vulnerabilities

Every CVE whose affected-product data names Nokia Impact, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2019-17403 — CVSS 8.8 (high): Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution.
• CVE-2021-35484 — CVSS 8.2 (high): Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack…
• CVE-2021-35485 — CVSS 8.0 (high): The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload…
• CVE-2019-17405 — CVSS 6.1 (medium): Nokia IMPACT < 18A: has Reflected self XSS
• CVE-2019-17406 — CVSS 5.3 (medium): Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743
• CVE-2019-17404 — CVSS 4.3 (medium): Nokia IMPACT < 18A: allows full path disclosure
• CVE-2021-35483 — CVSS 4.1 (medium): The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload…