CVE-2017-8127

The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.

Score

CVSS 3.0 6.1 Medium

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Uma (Huawei)
• Uma (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en