Read the docs

Ericsson

Records61All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

Ericsson records in CISA KEV

No Ericsson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Codechecker 8 records HIGH Indoor Connect 8855 Firmware 8 records MEDIUM Network Manager 8 records LOW Drutt Mobile Service Delivery Platform 3 records MEDIUM Packet Core Gateway 3 records LOW Bscs Ix R18 Billing & Rating Admx 2 records LOW Bscs Ix R18 Billing & Rating Mx 2 records LOW Enterprise Content Management 2 records LOW

Records

8 records in Codechecker · all components

TI-2024-09344 CVE-2024-10081 · GHSA-f3f8-vx3w-hp5q

Authentication bypass in Ericsson CodeChecker

Priority HIGH 76

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.3992 Published 2024-11-06 Fixed in 6.24.2 CWE-288
TI-2024-36027 CVE-2024-53829 · GHSA-f8c8-4pm7-w885

Cross-Site Request Forgery in CodeChecker API

Priority HIGH 69

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00259 Published 2025-01-21 Fixed in 6.24.5 CWE-352
TI-2025-27277 CVE-2025-40843 · GHSA-5xf2-f6ch-6p8r

Buffer overflow in CodeChecker log command

Priority HIGH 67

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2025-10-28 Fixed in 6.26.2 CWE-121
TI-2026-20759 CVE-2026-25660 · GHSA-4v9x-cqc5-j645

Authentication bypass for certain API calls

Priority MEDIUM 48

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00447 Published 2026-04-24 No fix listed CWE-290
TI-2024-09345 CVE-2024-10082 · GHSA-fpm5-2wcj-vfr7

Authentication bypass in Ericsson CodeChecker

Priority MEDIUM 41

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00479 Published 2024-11-06 Fixed in 6.24.2 CWE-305
TI-2021-19910 CVE-2021-44217 · GHSA-fxmx-pfm2-85m2

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability…

Priority LOW 31

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON d…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01647 Published 2022-01-18 Fixed in 6.18.2 CWE-79
TI-2025-01113 CVE-2025-1300 · GHSA-g839-x3p3-g5fm

Open redirect in CodeChecker web server

Priority LOW 27

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00266 Published 2025-02-28 Fixed in 6.24.6 CWE-601
Open these records in search →