XSS in Ericsson Indoor Connect 8855

CVE-2025-40842

Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modification of certain information.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (10.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References