Hedex Lite (Huawei) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2019-06-13. Vendor: Huawei.

CVEs of Hedex Lite

• CVE-2019-5286 - CVSS 6.1 (medium), 2019-06-13: There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit…
• CVE-2017-8138 - CVSS 8.8 (high), 2017-11-22: HedEx Earlier than V200R006C00 versions has a cross-site request forgery (CSRF) vulnerability. An attacker could trick a user into accessing a website…
• CVE-2017-8137 - CVSS 7.8 (high), 2017-11-22: HedEx Earlier than V200R006C00 versions has a dynamic link library (DLL) hijacking vulnerability due to calling the DDL file by accessing a relative path. An…
• CVE-2017-8136 - CVSS 5.5 (medium), 2017-11-22: HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability. An attacker could exploit it to download arbitrary files on a target…
• CVE-2017-8139 - CVSS 6.1 (medium), 2017-11-22: HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious…