Ericsson: >> Enterprise Content Management >> 18.0 Security Vulnerabilities
In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.
CVSS Score
8.0
EPSS Score
0.004
Published
2021-09-17
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-09-17