What is CVE-2021-35484?

CVE-2021-35484 is a high-severity vulnerability in Nokia Impact, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-03-03.

How severe is CVE-2021-35484?

High severity. CVSS v3 base score is 8.2 out of 10.

SQL Injection in Nokia Impact

CVE-2021-35484

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive data from the database and obtain access to the database user, database name, and database version information.

Vulnerability class: SQL Injection

EPSS: 0.002 (14.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Nokia Impact
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Product)
cve@mitre.org (Issue Tracking)
cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2021-35484?: CVE-2021-35484 is a high-severity vulnerability in Nokia Impact, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-03-03.
How severe is CVE-2021-35484?: High severity. CVSS v3 base score is 8.2 out of 10.