Unscored CVE-2017-8125 EUVD-2017-17087GHSA-vm7v-j34j-7x3q

The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An…

Published Nov 22, 2017 · Updated Sep 17, 2024 · Assigned by huawei

Vendor: Huawei Product: UMA Category: Network devices

Description

The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.

Affected products

Vendor	Product	Affected	Fixed
Huawei Technologies	UMA	V200R001 and V300R001	—

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en