CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 1CVE-2020-29144
https://notcve.org/view.php?id=CVE-2020-29144
27 Nov 2020 — In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework. En Ericsson BSCS iX R18 Billing & Rating iX R18, MX, es un módulo de base web en BSCS iX, que es vulnerable a un ataque de tipo XSS almacenado por medio de ... • http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 1CVE-2020-29145
https://notcve.org/view.php?id=CVE-2020-29145
27 Nov 2020 — In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework. En Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX es un módulo de base web ... • http://the-it-wonders.blogspot.com/2020/01/ericsson-bscs-ix-r18-billing-rating.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •