← Database

CVE-2025-40842

MEDIUM CVSS: 6.1 Published: 2026-03-25 Modified: 2026-06-17

Description

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.

Affected Platforms

Ericsson Indoor Connect 8855Ericsson Indoor Connect 8855 Firmware

Weakness Type

CWE-79

References