CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.2. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-35484
Severity
HIGH
CVSS
8.2
EPSS
0.24%
Original NVD Description
Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive data from the database and obtain access to the database user, database name, and database version information.
Related CVEs
Other vulnerabilities affecting the same vendor(s)