PT-2021-23288

Name of the Vulnerable Software and Affected Versions Ericsson ECM versions prior to 18.0 Description The issue is related to a CSV Injection vulnerability in the Security Provider Endpoint within the User Profile Management Section. Recommendations For versions prior to 18.0, update to version...

CVE-2021-41390: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection...