Stored XSS Vulnerability in HedEx by Huawei
CVE-2017-8139

6.1MEDIUM

Key Information:

Vendor

McAfee
Status
Hedex Lite
Vendor
CVE Published:
22 November 2017

What is CVE-2017-8139?

HedEx versions prior to V200R006C00 are susceptible to stored cross-site scripting (XSS) vulnerabilities. This security flaw allows attackers to inject malicious scripts into the configuration file, potentially disrupting services for legitimate users and leading to unauthorized actions within the application. Organizations using affected versions should prioritize security measures and consider updating to mitigate this risk.

Affected Version(s)

HedEx Lite Earlier than V200R006C00 versions

References

http://www.huawei.com/en/psirt/security-advisories/2017/h...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.