Arbitrary File Upload Vulnerability in Nokia IMPACT Platform
CVE-2021-35483

4.1MEDIUM

Key Information:

Vendor

Nokia
Status
IMPACT
Vendor
CVE Published:
3 March 2026

What is CVE-2021-35483?

The Applications component of the Nokia IMPACT platform allows authenticated users to upload JavaScript files through the fileupload parameter. This vulnerability occurs when users add or edit existing applications. If an authenticated user accesses the page where the malicious JavaScript is hosted, it executes, potentially compromising the integrity and security of the application and the data it handles.

References

https://www.nokia.com/networks/solutions/impact-iot-platf...
https://www.nokia.com/notices/responsible-disclosure/
https://www.gruppotim.it/it/footer/red-team/2021/Motive-I...

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.