Cross-Site Scripting Vulnerability in UMA Product by Huawei
CVE-2017-8127

6.1MEDIUM

Key Information:

Vendor
McAfee
Status
Uma
Vendor
CVE Published:
22 November 2017

Summary

The UMA product from Huawei, specifically version V200R001, is susceptible to a cross-site scripting (XSS) vulnerability resulting from inadequate input validation. This flaw allows attackers to craft malicious links or scripts, enabling the execution of scripts in the user's browser session, potentially leading to unauthorized actions or data exposure.

Affected Version(s)

UMA V200R001

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.