CVE-2015-2167: Ericsson Drutt Mobile Service Delivery Platform

Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp.

Affected products

• Ericsson Drutt Mobile Service Delivery Platform: version 4.0 only; version 5.0 only; version 6.0 only

Published 2015-04-06. Last modified 2026-06-17.