Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Ericsson Indoor Connect 8855 2025.Q3 Clear all filters
TI-2025-27276 CVE-2025-40842 · GHSA-9v43-hq86-3v99

Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability

Priority MEDIUM 42

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00148 Published 2026-03-25 Fixed in 2025.Q3 CWE-79
TI-2025-27275 CVE-2025-40841 · GHSA-gprq-rmpq-q22w

Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability

Priority LOW 22

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized modification of certain information.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.001 Published 2026-03-25 Fixed in 2025.Q3 CWE-352
TI-2025-20107 CVE-2025-27260 · GHSA-3222-m64x-qwpg

Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability

Priority LOW 33

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthorized modification of certain information

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00218 Published 2026-03-25 Fixed in 2025.Q3 CWE-790