← Database

CVE-2021-41391

MEDIUM CVSS: 5.4 Published: 2021-09-17 Modified: 2026-06-17

Description

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.

Affected Platforms

Ericsson Enterprise Content Management

Weakness Type

CWE-79

References