Description
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
Unscored
CVE-2021-41391
EUVD-2021-28419GHSA-59mh-243q-3prc
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored X…
Published Sep 17, 2021 · Updated Aug 4, 2024 · Assigned by mitre