https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-35485.htmlhttps://patchthecve.com/cve/CVE-2021-35485.htmlWed, 17 Jun 2026 03:57:33 +0000HIGH 8.0: The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editinhttps://patchthecve.com/cve/CVE-2021-35484.htmlhttps://patchthecve.com/cve/CVE-2021-35484.htmlWed, 17 Jun 2026 03:57:33 +0000HIGH 8.2: Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive https://patchthecve.com/cve/CVE-2021-35483.htmlhttps://patchthecve.com/cve/CVE-2021-35483.htmlWed, 17 Jun 2026 03:57:33 +0000MEDIUM 4.1: The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an exis