CVE-2021-41391

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name…

published September 17, 2021

CVSS
—
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00569 · 46.4th percentile
Published
2021-09-17T20:56Z
EPSS history
Timeline
  • 17 SEP 20:56Z
    In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name…
    cvelistv5