CVE-2021-41391
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
CVSS 3.1 · 5.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products