Skip to content
OpenAdvisories

Vendor

Hangzhou H3C Technologies

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    H3C SSL VPN n/a Username Enumeration via Login Script Credential Verification

    H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to disting…