medium6.1
CVE-2025-40842
Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclo…
Impact
Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ericsson | Indoor Connect 8855 Firmware | before 2025.q3 |