CVE-2021-41390: Ericsson Enterprise Content Management

High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days.

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.

Affected products

• Ericsson Enterprise Content Management: version 18.0 only

Published 2021-09-17. Last modified 2026-06-17.