article thumbnail

Red TIM Research found two rare flaws in Ericsson OSS-RC component

Security Affairs

In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely resolved in new Ericsson library browsing tool ELEX used in systems like Ericsson Network Manager. CVE-2021-32569. CVE-2021-32571.

Cleanup 92