CVE-2021-41390

8.0 highEPSS 1.1%

High (8.0) in ericsson enterprise content management. EPSS 1.1% chance of exploitation in the next 30 days.

In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.

Severity

8.0 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2021-09-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19