PatchTheCVECVE-2021-35484: Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean
CVE-2021-35484 is a high-severity flaw (CVSS 8.2) affecting impact. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive data from the database and obtain access to the database user, database name, and database version information.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.2 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 84%) |
| CISA exploited list | No |
| Weakness | CWE-89 |
| Published | 2026-03-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2021-35484?
impact: upgrade to newer than 19.11.2.10-20210118042150283. Exact commands for each OS are on this page.
Is CVE-2021-35484 being exploited?
CVE-2021-35484 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2021-35484 affect?
CVE-2021-35484 affects impact. Severity is high (CVSS 8.2). Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP
How urgent is CVE-2021-35484?
Priority 38/100. High severity; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2021-35485 HIGH 8.0 UPGRADE The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticate
- CVE-2021-35483 MEDIUM 4.1 UPGRADE The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticate