Skip to content
Ericsson vulnerabilities
Newest
-
ericsson codechecker
Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
CVE-2026-58107
5.5 Medium
-
ericsson codechecker
Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
CVE-2026-58106
2.0 Low
-
ericsson codechecker
Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB
CVE-2026-58108
1.2 Low
-
ericsson packet core controller (pcc)
Path traversal Vulnerability
CVE-2025-59181
4.8 Medium
-
ericsson packet core controller (pcc)
Use of Hard-coded Credentials Vulnerability
CVE-2025-59180
5.1 Medium
-
ericsson packet core controller (pcc)
Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
CVE-2025-59178
4.8 Medium
-
ericsson packet core controller (pcc)
Generation of Error Message Containing Sensitive Information Vulnerability
CVE-2025-59177
6.8 Medium
-
ericsson packet core controller (pcc)
Improper Neutralization of Special Elements used in an OS Command Vulnerability
CVE-2025-59172
8.5 High
-
ericsson packet core controller
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an...
CVE-2025-59174
7.1 High
-
ericsson packet core gateway (pcg), packet core gateway +1 more
Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
CVE-2026-25659
7.1 High
-
ericsson packet core gateway (pcg), packet core gateway +1 more
Ericsson Packet Core Gateway (PCG) - Improper handling of missing values Vulnerability
CVE-2026-25658
7.1 High
-
ericsson packet core gateway (pcg), packet core gateway +1 more
Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure Vulnerability
CVE-2026-25657
7.1 High
-
ericsson codechecker
Authentication bypass for certain API calls
CVE-2026-25660
9.3 Critical
-
ericsson packet core controller (pcc), packet core controller +1 more
Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure Vulnerability
CVE-2024-53828
5.3 Medium
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability
CVE-2025-40842
8.5 High
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability
CVE-2025-40841
5.1 Medium
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
CVE-2025-27260
7.2 High
-
ericsson ran compute (all bb versions), site controller 6610 +1 more
Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller
CVE-2025-0636
8.4 High
-
ericsson network manager, network manager(enm) +1 more
Ericsson Network Manager: escalation of privilege vulnerability
CVE-2025-27258
6.9 Medium
-
ericsson network manager, network manager(enm) +1 more
Ericsson Network Manager: improper neutralization of user controlled input
CVE-2025-27259
2.4 Low
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
CVE-2025-40838
5.1 Medium
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability
CVE-2025-40837
8.7 High
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
CVE-2025-40836
8.7 High
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability
CVE-2025-27262
8.5 High
-
ericsson indoor connect 8855, indoor connect 8855 firmware +1 more
Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability
CVE-2025-27261
8.7 High
-
ericsson codechecker
Buffer overflow in CodeChecker log command
CVE-2025-40843
Fix available
5.9 Medium
-
ericsson catalog manager, order care +1 more
Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
CVE-2024-25011
5.3 Medium
-
ericsson site controller 6610, ran compute basebands (all bb variants) +1 more
Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability
CVE-2024-25010
8.8 High
-
ericsson packet core controller
Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability
CVE-2024-53827
7.5 High
-
ericsson codechecker
Open redirect in CodeChecker web server
CVE-2025-1300
Fix available
6.1 Medium
-
ericsson codechecker
Cross-Site Request Forgery in CodeChecker API
CVE-2024-53829
Fix available
8.2 High
-
ericsson codechecker
codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
CVE-2024-10082
Fix available
8.7 High
-
ericsson codechecker
codechecker vulnerable to authentication bypass when using specifically crafted URLs
CVE-2024-10081
Fix available
EPSS 39.9%
10.0 Critical
-
ericsson packet core controller
Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability
CVE-2024-25009
6.5 Medium
-
ericsson controller 6610, ran compute, site controller 6610 +1 more +3 more
Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability
CVE-2024-25008
6.8 Medium
-
ericsson codechecker
Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
CVE-2023-49793
Fix available
6.5 Medium
-
ericsson network manager
Ericsson Network Manager - Improper Neutralization of Formula Elements Vulnerability
CVE-2024-25007
7.1 High
-
ericsson network manager
Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low...
CVE-2023-39909
8.8 High
-
ericsson evolved packet gateway
An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x...
CVE-2022-47531
8.8 High
-
ericsson mobile switching center server bc 18a firmware
Ericsson Mobile Switching Center Server (MSC-S) BC 18A and IS 3.1 releases before IS 3.1 CP22...
CVE-2021-28485
4.3 Medium
-
ericsson network manager
Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the...
CVE-2022-46408
6.8 Medium
-
ericsson network manager
Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST...
CVE-2022-46407
4.8 Medium
-
ericsson network manager
In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS...
CVE-2021-32570
4.9 Medium
-
ericsson network manager
Ericsson Network Manager 20.2 has Insecure Permissions.
CVE-2021-28488
6.5 Medium
-
ericsson codechecker
Cross-site Scripting in Ericsson CodeChecker
CVE-2021-44217
Public exploitFix available
6.1 Medium
-
ericsson network location
In Ericsson Network Location MPS GMPC21, it is possible to inject commands via file_name in the...
CVE-2021-43339
Public exploit
8.8 High
-
ericsson operations support system-radio and core firmware
** UNSUPPORTED WHEN ASSIGNED ** In OSS-RC systems of the release 18B and older during data...
CVE-2021-32571
4.9 Medium
-
ericsson operations support system-radio and core firmware
** UNSUPPORTED WHEN ASSIGNED ** In OSS-RC systems of the release 18B and older customer...
CVE-2021-32569
6.1 Medium
-
ericsson enterprise content management
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile...
CVE-2021-41391
5.4 Medium
-
ericsson enterprise content management
In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile...
CVE-2021-41390
8.0 High
- Show olderLoading…