Vendors / Ericsson Records 61 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 22
Exploited now Ericsson records in CISA KEV No Ericsson vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.
CVSS 3.1 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.0111 · Published 2021-09-17 · No fix listed CWE-74
Priority LOW 25
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00569 · Published 2021-09-17 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 22 32 3 1
