← Back

Bscs Ix R18 Billing & Rating Admx

bscs_ix_r18_billing_&_rating_admx

Vendor: Ericsson • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-29145
1Ericsson
2Bscs Ix R18 Billing & Rating Admx
Bscs Ix R18 Billing & Rating Mx
Jun 17, 2026
Nov 27, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights G...Show more
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.Show less
CVE-2020-29144
1Ericsson
2Bscs Ix R18 Billing & Rating Admx
Bscs Ix R18 Billing & Rating Mx
Jun 17, 2026
Nov 27, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing th...Show more
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.Show less