Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-40842

Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability

Description

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ericsson Indoor Connect 8855

Default version status: affected

  • 0 to < 2025.Q3affected

References