Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Filtered by product Uma
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-8121 1 Huawei 1 Uma 2017-12-08 5.0 MEDIUM 5.3 MEDIUM
The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak.
CVE-2017-8127 1 Huawei 1 Uma 2017-12-08 4.3 MEDIUM 6.1 MEDIUM
The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.
CVE-2017-8130 1 Huawei 1 Uma 2017-12-08 4.0 MEDIUM 6.5 MEDIUM
The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak.
CVE-2017-8125 1 Huawei 1 Uma 2017-12-08 4.3 MEDIUM 6.1 MEDIUM
The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.
CVE-2016-7108 1 Huawei 1 Uma 2016-09-08 4.0 MEDIUM 6.5 MEDIUM
Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors.