Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ericsson Ecm 跨站脚本漏洞
Vulnerability Description
Ericsson Ecm是瑞典爱立信(Ericsson)公司的一个云管理器。 Ericsson ECM 18.0之前版本存在跨站脚本漏洞,该漏洞源于在18.0之前的爱立信ECM中,用户配置文件管理节中的安全管理端点缺少有效的验证与转义,很容易受到存储型的XSS的攻击,从而导致会话劫持和整个帐户被接管。
CVSS Information
N/A
Vulnerability Type
N/A