Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ericsson Packet Core Controller (PCC) 1.39 Clear all filters
TI-2025-36774 CVE-2025-59181 · GHSA-36r8-3m39-xrv3

Path traversal in Ericsson Packet Core Controller

Priority LOW 22

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitim…

CVSS 4.0MEDIUM 4.8 Adjacent network High privileges No interaction EPSS 0.00431 Published 2026-07-27 Fixed in 1.39 CWE-35
TI-2025-36772 CVE-2025-59178 · GHSA-gpxc-m66h-466j

Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability

Priority LOW 22

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.

CVSS 4.0MEDIUM 4.8 Adjacent network High privileges No interaction EPSS 0.00231 Published 2026-07-27 Fixed in 1.39 CWE-497