Login Request a demo
ER
Vendor
Ericsson
26 products with CVEs on record
75
CVEs
0
On KEV
0
New 30D
Products
CO
CodeChecker
Ericsson
10.0
11 CVEs0 on KEV0 new
IC
Indoor Connect 8855
Ericsson
9.8
8 CVEs0 on KEV0 new
IC
Indoor Connect 8855 Firmware
Ericsson
9.8
8 CVEs0 on KEV0 new
NM
Network Manager
Ericsson
9.8
8 CVEs0 on KEV0 new
PC
Packet Core Controller (PCC)
Ericsson
8.5
5 CVEs0 on KEV0 new
DM
Drutt Mobile Service Delivery Platform
Ericsson
–
3 CVEs0 on KEV0 new
PC
Packet Core Controller
Ericsson
7.5
3 CVEs0 on KEV0 new
PC
Packet Core Gateway
Ericsson
6.5
3 CVEs0 on KEV0 new
PC
Packet Core Gateway (PCG)
Ericsson
6.5
3 CVEs0 on KEV0 new
BI
Bscs IX R18 Billing & Rating Admx
Ericsson
5.4
2 CVEs0 on KEV0 new
BI
Bscs IX R18 Billing & Rating MX
Ericsson
5.4
2 CVEs0 on KEV0 new
EC
Enterprise Content Management
Ericsson
8.0
2 CVEs0 on KEV0 new
EN
Ericsson Network Manager(ENM)
Ericsson
9.8
2 CVEs0 on KEV0 new
OS
Operations Support System-radio And Core Firmware
Ericsson
6.1
2 CVEs0 on KEV0 new
SC
Site Controller 6610
Ericsson
8.8
2 CVEs0 on KEV0 new
AL
Active Library Explorer
Ericsson
6.1
1 CVEs0 on KEV0 new
AT
Axc Tigris Multiservice Access Platform
Ericsson
–
1 CVEs0 on KEV0 new
EC
Ericsson Catalog Manager
Ericsson
5.3
1 CVEs0 on KEV0 new
EO
Ericsson Order Care
Ericsson
5.3
1 CVEs0 on KEV0 new
EP
Ericsson Packet Core Controller (PCC)
Ericsson
6.8
1 CVEs0 on KEV0 new
ER
Ericsson RAN Compute Basebands (all BB variants)
Ericsson
8.8
1 CVEs0 on KEV0 new
EP
Evolved Packet Gateway
Ericsson
8.8
1 CVEs0 on KEV0 new
HA
Hm220dp Adsl Modem
Ericsson
–
1 CVEs0 on KEV0 new
MS
Mobile Switching Center Server BC 18a Firmware
Ericsson
4.3
1 CVEs0 on KEV0 new
NL
Network Location
Ericsson
8.8
1 CVEs0 on KEV0 new
RC
RAN Compute (all BB versions)
Ericsson
8.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-58107
CO
CodeChecker
Ericsson
5.5
0%
Aug 28Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
CVE-2026-58106
CO
CodeChecker
Ericsson
2.0
0%
Aug 28Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
CVE-2026-58108
CO
CodeChecker
Ericsson
1.2
0%
Aug 26Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB
CVE-2025-59181
PC
Packet Core Controller (PCC)
Ericsson
4.8
0%
Jul 27Path traversal Vulnerability
CVE-2025-59180
PC
Packet Core Controller (PCC)
Ericsson
5.1
0%
Jul 27Use of Hard-coded Credentials Vulnerability
CVE-2025-59178
PC
Packet Core Controller (PCC)
Ericsson
4.8
0%
Jul 27Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
CVE-2025-59177
EP
Ericsson Packet Core Controller (PCC)
Ericsson
6.8
0%
Jul 27Generation of Error Message Containing Sensitive Information Vulnerability
CVE-2025-59172
PC
Packet Core Controller (PCC)
Ericsson
8.5
0%
Jul 27Improper Neutralization of Special Elements used in an OS Command Vulnerability
CVE-2025-59174
PC
Packet Core Controller
Ericsson
6.5
0%
Jun 5Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service…
CVE-2026-25659
PC
Packet Core Gateway (PCG)
Ericsson
6.5
0%
Jun 5Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
CVE-2026-25658
PC
Packet Core Gateway (PCG)
Ericsson
6.5
0%
Jun 5Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
CVE-2026-25657
PC
Packet Core Gateway (PCG)
Ericsson
6.5
0%
Jun 5Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability
CVE-2026-25660
CO
CodeChecker
Ericsson
9.8
0%
Apr 24Authentication bypass for certain API calls
CVE-2024-53828
PC
Packet Core Controller (PCC)
Ericsson
5.3
0%
Apr 1Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability
CVE-2025-40842
IC
Indoor Connect 8855
Ericsson
6.1
0%
Mar 25Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability
CVE-2025-40841
IC
Indoor Connect 8855
Ericsson
4.3
0%
Mar 25Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability
CVE-2025-27260
IC
Indoor Connect 8855
Ericsson
7.5
0%
Mar 25Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
CVE-2025-40843
CO
CodeChecker
Ericsson
7.8
0%
Oct 28Buffer overflow in CodeChecker log command
CVE-2025-0636
SC
Site Controller 6610
Ericsson
8.4
0%
Oct 13Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller
CVE-2025-27258
EN
Ericsson Network Manager(ENM)
Ericsson
9.8
0%
Oct 13Ericsson Network Manager: escalation of privilege vulnerability
CVE-2025-27259
EN
Ericsson Network Manager(ENM)
Ericsson
5.4
0%
Oct 13Ericsson Network Manager: improper neutralization of user controlled input
CVE-2025-40838
IC
Indoor Connect 8855
Ericsson
7.5
0%
Sep 25Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
CVE-2025-40837
IC
Indoor Connect 8855
Ericsson
8.8
0%
Sep 25Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability
CVE-2025-40836
IC
Indoor Connect 8855
Ericsson
9.8
0%
Sep 25Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
CVE-2025-27262
IC
Indoor Connect 8855
Ericsson
7.8
1%
Sep 25Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability
CVE-2025-27261
IC
Indoor Connect 8855
Ericsson
9.8
0%
Sep 25Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability
CVE-2024-25011
EO
Ericsson Order Care
Ericsson
5.3
0%
Sep 18Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
CVE-2024-25010
SC
Site Controller 6610
Ericsson
8.8
0%
May 22Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability
CVE-2024-53827
PC
Packet Core Controller
Ericsson
7.5
0%
May 16Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability
CVE-2025-1300
CO
CodeChecker
Ericsson
6.1
0%
Feb 28Open redirect in CodeChecker web server
CVE-2024-53829
CO
CodeChecker
Ericsson
8.2
0%
Jan 21Cross-Site Request Forgery in CodeChecker API
CVE-2024-10082
CO
Codechecker
Ericsson
9.0
0%
Nov 6CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
CVE-2024-10081
CO
Codechecker
Ericsson
10.0
40%
Nov 6CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
CVE-2023-49793
CO
Codechecker
Ericsson
6.5
1%
Jun 24CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
CVE-2024-25007
NM
Network Manager
Ericsson
7.1
0%
Apr 4Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application log where Improper Neutralization of Formula Elements in a…
CVE-2023-39909
NM
Network Manager
Ericsson
8.8
1%
Dec 7Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application
CVE-2022-47531
EP
Evolved Packet Gateway
Ericsson
8.8
2%
Dec 5An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands…
CVE-2021-28485
MS
Mobile Switching Center Server BC 18a Firmware
Ericsson
4.3
1%
Sep 14In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after…
CVE-2022-46408
NM
Network Manager
Ericsson
6.8
1%
Jun 29Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula…
CVE-2022-46407
NM
Network Manager
Ericsson
4.8
0%
Jun 29Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to…
CVE-2021-32570
NM
Network Manager
Ericsson
4.9
1%
Aug 26In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from certain log files
CVE-2021-28488
NM
Network Manager
Ericsson
6.5
1%
Mar 10Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly…
CVE-2021-44217
CO
Codechecker
Ericsson
6.1
2%
Jan 18In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject…
CVE-2021-43339
NL
Network Location
Ericsson
8.8
10%
Nov 3In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file_name in the export functionality
CVE-2021-32571
OS
Operations Support System-radio And Core Firmware
Ericsson
4.9
1%
Oct 14In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders…
CVE-2021-32569
OS
Operations Support System-radio And Core Firmware
Ericsson
6.1
1%
Oct 14In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting
CVE-2021-41391
EC
Enterprise Content Management
Ericsson
5.4
1%
Sep 17In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session…
CVE-2021-41390
EC
Enterprise Content Management
Ericsson
8.0
1%
Sep 17In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection
CVE-2020-29145
BI
Bscs IX R18 Billing & Rating MX
Ericsson
5.4
1%
Nov 27In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a…
CVE-2020-29144
BI
Bscs IX R18 Billing & Rating Admx
Ericsson
5.4
1%
Nov 27In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment
CVE-2019-7417
AL
Active Library Explorer
Ericsson
6.1
2%
Mar 17XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter
CVE-2015-2167
DM
Drutt Mobile Service Delivery Platform
Ericsson
–
1%
Apr 6Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web…
CVE-2015-2166
DM
Drutt Mobile Service Delivery Platform
Ericsson
–
27%
Apr 6Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to read arbitrary files via…
CVE-2015-2165
DM
Drutt Mobile Service Delivery Platform
Ericsson
–
2%
Apr 6Multiple cross-site scripting (XSS) vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4.x, 5.x, and 6.x allow remote attackers to…
CVE-2003-1442
HA
Hm220dp Adsl Modem
Ericsson
–
3%
Dec 31The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side
CVE-2000-0542
AT
Axc Tigris Multiservice Access Platform
Ericsson
–
1%
Jun 13Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds