CVE-2021-41391: Ericsson Enterprise Content Management

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.

Affected products

• Ericsson Enterprise Content Management: version 18.0 only

Published 2021-09-17. Last modified 2026-06-17.