Vulnerabilities

TI-2021-18207 CVE-2021-41391 · GHSA-59mh-243q-3prc

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User…

LOW 25

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00569 Published 2021-09-17 No fix listed CWE-79

TI-2021-18206 CVE-2021-41390 · GHSA-88x2-v352-g224

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User…

LOW 37

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0111 Published 2021-09-17 No fix listed CWE-74

Vulnerabilities

Filters

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User…

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User…