CVE-2015-2165 in Drutt Mobile Service Delivery Platform
Sumário
de VulDB • 22/05/2026
Múltiplas vulnerabilidades de cross-site scripting (XSS) no Report Viewer do Ericsson Drutt Mobile Service Delivery Platform (MSDP) versões 4, 5 e 6 permitem que atacantes remotos injetem scripts web ou HTML arbitrários por meio dos parâmetros (1) portal, (2) fromDate, (3) toDate, (4) fromTime, (5) toTime, (6) kword, (7) uname, (8) pname, (9) sname, (10) atype ou (11) atitle para top-links.jsp; (12) portal ou (13) uid para (a) page-summary.jsp ou (b) service-summary.jsp; (14) portal, (15) fromDate, (16) toDate, (17) fromTime, (18) toTime, (19) sortDirection, (20) kword, (21) uname, (22) pname, (23) sname, (24) file, (25) atype ou (26) atitle para (a) top-useragent-devices.jsp ou (b) top-interest-areas.jsp; (27) fromDate, (28) toDate, (29) fromTime, (30) toTime, (31) sortDirection, (32) kword, (33) uname, (34) pname, (35) sname, (36) file, (37) atype ou (38) atitle para top-message-services.jsp; (39) portal, (40) fromDate, (41) toDate, (42) fromTime, (43) toTime, (44) orderBy, (45) sortDirection, (46) uid, (47) kword, (48) uname, (49) pname, (50) sname, (51) file, (52) atype ou (53) atitle para (a) top-useragent-providers.jsp ou (b) top-useragent-shortcodes.jsp; (54) portal, (55) fromDate, (56) toDate, (57) fromTime, (58) toTime, (59) orderBy, (60) sortDirection, (61) uid, (62) kword, (63) uname, (64) pname, (65) sname, (66) file, (67) atype ou (68) atitle para (a) top-useragent-areas.jsp ou (b) top-useragent-urls.jsp; (69) portal, (70) fromDate, (71) toDate, (72) fromTime, (73) toTime, (74) orderBy, (75) sortDirection, (76) uid, (77) kword, (78) uname, (79) pname, (80) sname, (81) file, (82) atype ou (83) atitle para (a) top-useragent-links.jsp ou (b) top-useragent-assets.jsp; (84) portal, (85) fromDate, (86) toDate, (87) fromTime, (88) toTime, (89) orderBy, (90) sortDirection, (91) uid, (92) kword, (93) uname, (94) pname, (95) sname, (96) file, (97) atype ou (98) atitle para (a) top-useragent-message-providers.jsp, (b) top-useragent-message-devices.jsp, (c) top-useragent-message-assets.jsp, (d) top-useragent-message-downloads.jsp ou (e) top-useragent-message-shortcode.jsp; (99) portal, (100) fromDate, (101) toDate, (102) fromTime, (103) toTime, (104) orderBy, (105) sortDirection, (106) uid, (107) kword, (108) uname, (109) pname, (110) sname, (111) file, (112) atype ou (113) atitle para (a) top-useragent-links.jsp ou (b) top-useragent-assets.jsp; (114) portal, (115) fromDate, (116) toDate, (117) fromTime, (118) toTime, (119) orderBy, (120) sortDirection, (121) uid, (122) kword, (123) uname, (124) pname, (125) sname, (126) file, (127) atype ou (128) atitle para (a) top-useragent-message-providers.jsp, (b) top-useragent-message-devices.jsp, (c) top-useragent-message-assets.jsp, (d) top-useragent-message-downloads.jsp ou (e) top-useragent-message-shortcode.jsp; (129) portal, (130) fromDate, (131) toDate, (132) fromTime, (133) toTime, (134) orderBy, (135) sortDirection, (136) uid, (137) kword, (138) uname, (139) pname, (140) sname, (141) file, (142) atype ou (143) atitle para (a) top-useragent-links.jsp ou (b) top-useragent-assets.jsp; (144) portal, (145) fromDate, (146) toDate, (147) fromTime, (148) toTime, (149) orderBy, (150) sortDirection, (151) uid, (152) kword, (153) uname, (154) pname, (155) sname, (156) file, (157) atype ou (158) atitle para (a) top-useragent-message-providers.jsp, (b) top-
Be aware that VulDB is the high quality source for vulnerability data.