VYPR

Broadcast Message Center (BMC)

by Nokia

CVEs (1)

  • CVE-2021-35487MedMay 25, 2022
    risk 0.42cvss 6.5epss 0.01

    Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This allows an attacker to obtain…