Uma (Huawei) - vulnerabilities (CVEs)

18 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2017-11-22. Vendor: Huawei.

CVEs of Uma

CVE-2017-8124 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An…
CVE-2017-8127 - CVSS 6.1 (medium), 2017-11-22: The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious…
CVE-2017-8130 - CVSS 6.5 (medium), 2017-11-22: The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive…
CVE-2017-8117 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of…
CVE-2017-8120 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of…
CVE-2017-8123 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An…
CVE-2017-8126 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An…
CVE-2017-8129 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of…
CVE-2017-8119 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of…
CVE-2017-8122 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An…
CVE-2017-8125 - CVSS 6.1 (medium), 2017-11-22: The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could…
CVE-2017-8128 - CVSS 9.8 (critical), 2017-11-22: The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of…
CVE-2017-8118 - CVSS 2.3 (low), 2017-11-22: The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive…
CVE-2017-8121 - CVSS 5.3 (medium), 2017-11-22: The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive…
CVE-2016-7110 - CVSS 9.8 (critical), 2016-09-07: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different…
CVE-2016-7109 - CVSS 9.8 (critical), 2016-09-07: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different…
CVE-2016-7108 - CVSS 6.5 (medium), 2016-09-07: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords…
CVE-2016-7107 - CVSS 7.5 (high), 2016-09-07: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect…