473 matches found
CVE-2021-41390
Ericsson ECM prior to 18.0 contains a CSV injection vulnerability in the Security Provider Endpoint of the User Profile Management section (CVE-2021-41390). The issue is documented across multiple sources (NVD, Red Hat advisory, CVE list, CNNVD). The provided materials consistently describe the a...
Ericsson Ecm 跨站脚本漏洞
Ericsson Ecm is a cloud manager from Ericsson Sweden. A cross-site scripting vulnerability exists in Ericsson ECM versions prior to 18.0. The vulnerability stems from the lack of effective validation and escaping of the security management endpoints in the user profile management section of...
Ericsson ECM 注入漏洞
Ericsson Ecm is a cloud manager from Ericsson Sweden. A security vulnerability exists in Ericsson ECM versions prior to 18.0 that stems from the fact that in Ericsson ECM prior to 18.0, the security provider endpoint in the user profile management section is vulnerable to CSV injection...
Security Advisory 2021-08-01-3 - luci-app-ddns: Multiple authenticated RCEs (CVE-2021-28961)
DESCRIPTION An authenticated user in LuCI is able to inject shell code in luci-app-ddns. Multiple variables in the luci-app-ddns applications where not validated before they were executed on the system's shell, which could be exploited by adding system shell commands. REQUIREMENTS To exploit this...
Ericsson Erlang Trust Management Issue Vulnerability
Ericsson Erlang is a general-purpose concurrency-oriented programming language from Ericsson, Sweden. A trust management issue vulnerability exists in Ericsson Erlang/OTP before 23.2.2, which arises when an application accepts an invalid X.509 certificate chain and trusts it to a trusted root...
CVE-2020-29145
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing th...
CVE-2020-29144
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or...
Cross site scripting
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing th...
Cross site scripting
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or...
CVE-2020-29144
CVE-2020-29144 affects Ericsson BSCS iX R18 Billing & Rating, MX web module, which is vulnerable to stored XSS via an Alert Dashboard comment. The provided documents describe stored XSS as the core issue in the web module, with tests indicating possible session hijacking that could lead to full a...
CVE-2020-29144
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or...
CVE-2020-29145
The CVE-2020-29145 entry concerns Ericsson BSCS iX R18 Billing & Rating iX R18, where the ADMX web-based module is vulnerable to stored XSS via the name or description fields in the solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. The description and related connected records c...
CVE-2020-29145
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing th...
Ericsson BSCS iX R18 Billing & Rating Cross-Site Scripting Vulnerability
Ericsson Ericsson BSCS iX R18 Billing & Rating is a web platform for telecom billing from Ericsson, Sweden. Ericsson BSCS iX R18 Billing & Rating iX R18 suffers from a cross-site scripting vulnerability that originates in the ADMX web base module and is susceptible to stored XSS via the name or...
Ericsson BSCS iX R Billing & Rating Cross-Site Scripting Vulnerability
Ericsson Ericsson BSCS iX R18 Billing & Rating is a web platform for telecom billing from Ericsson Sweden. Ericsson BSCS iX R18 Billing & Rating iX R18 suffers from a cross-site scripting vulnerability that stems from the MX web base module being vulnerable to stored XSS via warning dashboard...
ericsson.site123.me Cross Site Scripting vulnerability OBB-1477633
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-22158
The CVE-2020-22158 entry affects MediaKind RX8200 devices (version 5.13.3). It describes multiple reflected and stored XSS vulnerabilities: reflected XSS requires an attacker to inject JavaScript into the path or Services+ID parameters and lure a user to a crafted URL; stored XSS requires modifyi...
shippingtool.ericsson.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-978379 Security Researcher fakessh Helped patch 1840 vulnerabilities Received 9 Coordinated Disclosure badges Received 60 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting shippingtool.ericsson.net...
