EUVD-2021-28419

Malicious code in bioql PyPI...

EUVD-2021-28418

Malicious code in bioql PyPI...

CVE-2021-41391

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover...

CVE-2021-41390

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection...

CVE-2021-41391

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover...

CVE-2021-41390

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection...

CVE-2021-41390

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection...

CVE-2021-41391

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover...

Input validation

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection...

CVE-2021-41391

CVE-2021-41391 affects Ericsson ECM prior to 18.0. The Security Management Endpoint in the User Profile Management section is vulnerable to stored XSS via a name, enabling session hijacking and potential full account takeover. This vulnerability is documented across multiple sources (NVD entry wi...

CVE-2021-41391

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover...

CVE-2021-41390: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection...

PT-2021-23288

Name of the Vulnerable Software and Affected Versions Ericsson ECM versions prior to 18.0 Description The issue is related to a CSV Injection vulnerability in the Security Provider Endpoint within the User Profile Management Section. Recommendations For versions prior to 18.0, update to version...

PT-2021-23289

Name of the Vulnerable Software and Affected Versions Ericsson ECM versions prior to 18.0 Description The Security Management Endpoint in the User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover. Recommendations For version...

CVE-2021-41391: Improper Neutralization of Input During Web Page Generation

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover...