553 matches found
Cross site scripting
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or...
Cross site scripting
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing th...
CVE-2020-29144
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or...
CVE-2020-29144
CVE-2020-29144 affects Ericsson BSCS iX R18 Billing & Rating, MX web module, which is vulnerable to stored XSS via an Alert Dashboard comment. The provided documents describe stored XSS as the core issue in the web module, with tests indicating possible session hijacking that could lead to full a...
CVE-2020-29145
The CVE-2020-29145 entry concerns Ericsson BSCS iX R18 Billing & Rating iX R18, where the ADMX web-based module is vulnerable to stored XSS via the name or description fields in the solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. The description and related connected records c...
CVE-2020-29145
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing th...
CVE-2020-29144: Improper Neutralization of Input During Web Page Generation
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or...
PT-2020-17100
Name of the Vulnerable Software and Affected Versions Ericsson BSCS iX R18 Billing & Rating iX R18 Description The issue concerns a stored XSS vulnerability in the ADMX web-based module, specifically via the name or description field in the solutionUnitServlet?SuName=UserReferenceDataSU Access...
PT-2020-17099
Name of the Vulnerable Software and Affected Versions Ericsson BSCS iX R18 Billing & Rating iX R18 Description The issue concerns a stored XSS vulnerability in the MX web-based module of Ericsson BSCS iX, specifically via an Alert Dashboard comment. This vulnerability can potentially lead to...
CVE-2020-29145: Improper Neutralization of Input During Web Page Generation
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing th...
Ericsson BSCS iX R18 Billing & Rating Cross-Site Scripting Vulnerability
Ericsson Ericsson BSCS iX R18 Billing & Rating is a web platform for telecom billing from Ericsson, Sweden. Ericsson BSCS iX R18 Billing & Rating iX R18 suffers from a cross-site scripting vulnerability that originates in the ADMX web base module and is susceptible to stored XSS via the name or...
Ericsson BSCS iX R Billing & Rating Cross-Site Scripting Vulnerability
Ericsson Ericsson BSCS iX R18 Billing & Rating is a web platform for telecom billing from Ericsson Sweden. Ericsson BSCS iX R18 Billing & Rating iX R18 suffers from a cross-site scripting vulnerability that stems from the MX web base module being vulnerable to stored XSS via warning dashboard...
ericsson.site123.me Cross Site Scripting vulnerability OBB-1477633
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-22158
The CVE-2020-22158 entry affects MediaKind RX8200 devices (version 5.13.3). It describes multiple reflected and stored XSS vulnerabilities: reflected XSS requires an attacker to inject JavaScript into the path or Services+ID parameters and lure a user to a crafted URL; stored XSS requires modifyi...
shippingtool.ericsson.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-978379 Security Researcher fakessh Helped patch 1840 vulnerabilities Received 9 Coordinated Disclosure badges Received 60 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting shippingtool.ericsson.net...
CVE-2019-7417
XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...
CVE-2019-7417
XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...
Cross site scripting
XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...
CVE-2019-7417
XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...
CVE-2019-7417
Ericsson Active Library Explorer (ALEX) 14.3 is affected by a cross-site scripting (XSS) vulnerability in the /cgi-bin/alexserv servlet. The issue arises from insufficient input validation in multiple parameters (DB, FN, fn, id), allowing injected script to run in a user’s browser. Public exploit...