Approved changes feed: RSS · Atom

cpe:2.3:a:ericsson:enterprise_content_management:18.0:*:*:*:*:*:*:*

part: a version: 18.0 update: *

VendorEricsson (198bbf36-f632-548c-bd14-c61a678abe8e)
ProductEnterprise Content Management (fdcde52d-36fc-5311-b321-799237556a6c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41391 vulnerable 2026-06-03 14:45:25.738681 Details available
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
Published: 2021-09-17T20:56:21.000Z
Updated: 2024-08-04T03:08:32.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41390 vulnerable 2026-06-03 14:45:25.738257 Details available
In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.
Published: 2021-09-17T20:55:54.000Z
Updated: 2024-08-04T03:08:32.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.