Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5255 State: PUBLISHED Published: 2019-12-13T22:48:31 Last Updated: 2024-08-04T19:47:56.961Z Vendors: n/a Products: AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 Problem Types: DoS Description: Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a DoS vulnerability. An attacker may send crafted messages from a FTP client to exploit this vulnerability. Due to in
ve a DoS vulnerability. An attacker may send crafted messages from a FTP client to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the system out-of-bounds read and result in a denial of service condition of the affected service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en
CVE ID: CVE-2019-5256 State: PUBLISHED Published: 2019-12-13T22:45:34 Last Updated: 2024-08-04T19:47:56.652Z Vendors: n/a Products: AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 Problem Types: null pointer dereference Description: Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vulnerability. The system dereferences a pointer that it expects to b
000V;eSpace U1981) have a null pointer dereference vulnerability. The system dereferences a pointer that it expects to be valid, but is NULL. A local attacker could exploit this vulnerability by sending crafted parameters. A successful exploit could cause a denial of service and the process reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en
CVE ID: CVE-2019-5257 State: PUBLISHED Published: 2019-12-13T22:16:22 Last Updated: 2024-08-04T19:47:56.752Z Vendors: n/a Products: AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 Problem Types: resource management Description: Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability. An attacker who logs in to the board may send crafted messages from the internal network. Additional Analyst Notes: - CVE Program Container: References:
ard may send crafted messages from the internal network. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en
CVE ID: CVE-2019-5258 State: PUBLISHED Published: 2019-12-13T22:41:04 Last Updated: 2024-08-04T19:47:56.829Z Vendors: n/a Products: AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 Problem Types: buffer overflow Description: Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the
ce U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en
CVE ID: CVE-2019-5259 State: PUBLISHED Published: 2019-12-16T21:43:48 Last Updated: 2024-08-04T19:47:56.814Z Vendors: n/a Products: AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600 Problem Types: Information Leakage Description: There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/secu
closure condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-vrp-en
CVE ID: CVE-2019-5260 State: PUBLISHED Published: 2019-12-13T21:52:56 Last Updated: 2024-08-04T19:47:56.865Z Vendors: n/a Products: HUAWEI Y9 2019;Honor View 20 Problem Types: Denial of Service Description: Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-adv
to reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-mobile-en
CVE ID: CVE-2019-5263 State: PUBLISHED Published: 2019-11-29T19:20:27 Last Updated: 2024-08-04T19:47:56.887Z Vendors: n/a Products: HiSuite, HwBackup Problem Types: Brute Forcing Description: HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawei smartphone user backup information can be obtained by brute forcing the password for encrypting the backup. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-backup-en
CVE ID: CVE-2019-5264 State: PUBLISHED Published: 2019-12-13T23:00:29 Last Updated: 2024-08-04T19:47:56.839Z Vendors: n/a Products: Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9 Problem Types: Information Disclosure Description: There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: Re
condition. Successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en
CVE ID: CVE-2019-5265 State: PUBLISHED Published: 2019-12-23T17:57:28 Last Updated: 2024-08-04T19:47:56.757Z Vendors: Huawei Products: P30 Problem Types: Improper Access Description: Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-01-share-en
CVE ID: CVE-2019-5266 State: PUBLISHED Published: 2019-12-23T17:49:20 Last Updated: 2024-08-04T19:47:56.820Z Vendors: Huawei Products: Share function P30 Problem Types: Insufficient Input Validation Description: Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-02-share-en
CVE ID: CVE-2019-5267 State: PUBLISHED Published: 2019-12-23T17:17:27 Last Updated: 2024-08-04T19:47:56.824Z Vendors: Huawei Products: OceanStor SNS3096 Problem Types: Information Disclosure Description: Huawei OceanStor SNS3096 V100R002C01 have an information disclosure vulnerability. Attackers with low privilege can exploit this vulnerability by performing some specific operations. Successful exploit of this vulnerability can cause some information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-03-information-en
CVE ID: CVE-2019-5268 State: PUBLISHED Published: 2019-11-29T20:01:51 Last Updated: 2024-08-04T19:47:56.841Z Vendors: n/a Products: CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRouter-CD20-10, HiRouter-CD21-16, HiRouter-CD30-10, HiRouter-CD30-11, HiRouter-H1-10, TC5200-10, WS5100-10, WS5102-10, WS5106-10, WS5108-10, WS5200-10, WS5200-11, , WS5280-10, WS5280-11, WS6500-10, WS6500-11, WS826-10 Problem Types: input validation Description: Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to so
n exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en
CVE ID: CVE-2019-5269 State: PUBLISHED Published: 2019-11-29T19:57:58 Last Updated: 2024-08-04T19:47:57.024Z Vendors: n/a Products: CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRouter-CD20-10, HiRouter-CD21-16, HiRouter-CD30-10, HiRouter-CD30-11, HiRouter-H1-10, TC5200-10, WS5100-10, WS5102-10, WS5106-10, WS5108-10, WS5200-10, WS5200-11, , WS5280-10, WS5280-11, WS6500-10, WS6500-11, WS826-10 Problem Types: improper authorization Description: Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege. Additional Analyst
n attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en
CVE ID: CVE-2019-5271 State: PUBLISHED Published: 2019-11-29T20:16:57 Last Updated: 2024-08-04T19:47:56.971Z Vendors: n/a Products: Myna Problem Types: Information Leak Description: There is an information leak vulnerability in Huawei smart speaker Myna. When the smart speaker is paired with the cloud through Wi-Fi, the speaker incorrectly processes some data. Attackers can exploit this vulnerability to read and modify specific configurations of speakers through a series of operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-myna-en
CVE ID: CVE-2019-5272 State: PUBLISHED Published: 2019-12-26T18:30:49 Last Updated: 2024-08-04T19:47:56.817Z Vendors: Huawei Products: USG9500 Problem Types: Missing Integrity Checking Description: USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-digital-en
CVE ID: CVE-2019-5273 State: PUBLISHED Published: 2019-12-26T18:49:52 Last Updated: 2024-08-04T19:47:56.749Z Vendors: Huawei Products: USG9500 Problem Types: denial of service Description: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a large heap buffer overrun error, an attacker may exploit the vulnerability by a malicious certificate, resulting a denial of service on the affected products. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en
CVE ID: CVE-2019-5274 State: PUBLISHED Published: 2019-12-26T18:42:01 Last Updated: 2024-08-04T19:47:57.020Z Vendors: Huawei Products: USG9500 Problem Types: denial of service Description: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in an infinite loop, an attacker may exploit the vulnerability via a malicious certificate to perform a denial of service attack on the affected products. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en
CVE ID: CVE-2019-5275 State: PUBLISHED Published: 2019-12-26T18:36:19 Last Updated: 2024-08-04T19:54:51.843Z Vendors: Huawei Products: USG9500 Problem Types: denial of service Description: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate to perform a denial of service attack on the affected products. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en
CVE ID: CVE-2019-5276 State: PUBLISHED Published: 2019-12-23T17:54:21 Last Updated: 2024-08-04T19:54:51.772Z Vendors: Huawei Products: ELLE-AL00B Problem Types: Buffer Overflow Description: Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. An attacker may intercept and tamper with the packet in the local area network (LAN) to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-02-smartphone-en
CVE ID: CVE-2019-5277 State: PUBLISHED Published: 2019-12-13T22:55:37 Last Updated: 2024-08-04T19:54:51.814Z Vendors: n/a Products: CloudUSM-EUA Problem Types: Information Leak Description: Huawei CloudUSM-EUA V600R006C10;V600R019C00 have an information leak vulnerability. Due to improper configuration, the attacker may cause information leak by successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-eua-en
CVE ID: CVE-2019-5278 State: PUBLISHED Published: 2019-12-13T21:39:39 Last Updated: 2024-08-04T19:54:51.778Z Vendors: n/a Products: CampusInsight Problem Types: Out-of-bounds Read Description: There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of this vulnerability may cause the database to crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en
CVE ID: CVE-2019-5279 State: PUBLISHED Published: 2019-11-13T13:24:39 Last Updated: 2024-08-04T19:54:52.397Z Vendors: n/a Products: Emily-L29C Problem Types: Information Leakage Description: Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions earlier than 9.1.0.316(C635E2R1P11T8), Versions earlier than 9.1.0.311(C185E2R1P12T8), Versions earlier than 9.1.0.311(C605E2R1P12T8), Versions earlier than 9.1.0.311(C636E7R1P13T8) have an information leakage vulnerability. An attacker tricks the user into installing a malicious application, which can copy specific files to the sdcard, resulting in information leaka
ser into installing a malicious application, which can copy specific files to the sdcard, resulting in information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191030-02-smartphone-en
CVE ID: CVE-2019-5280 State: PUBLISHED Published: 2019-08-13T20:35:24 Last Updated: 2024-08-04T19:54:51.773Z Vendors: Huawei Products: CloudLink Phone 7900 Problem Types: TLS certificate verification Description: The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally, affecting the availability of IP phones. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190724-01-
Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190724-01-7900-en
CVE ID: CVE-2019-5281 State: PUBLISHED Published: 2019-06-04T17:49:59 Last Updated: 2024-08-04T19:54:51.806Z Vendors: Huawei Products: Huawei Y9 2019 Problem Types: information leak Description: There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155(C185R1P2). When a local attacker uses the camera of a smartphone, the attacker can exploit this vulnerability to obtain sensitive information by performing a series of operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190218-01-smartphone-en
CVE ID: CVE-2019-5282 State: PUBLISHED Published: 2019-11-13T13:28:07 Last Updated: 2024-08-04T19:54:51.808Z Vendors: n/a Products: Emily-AL00A, Emily-TL00B, Emily-L09C, Emily-L29C Problem Types: Double Free Description: Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12) have a double free vulnerability. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice
ility. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice. Successful exploit could result in malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-smartphone-en
CVE ID: CVE-2019-5283 State: PUBLISHED Published: 2019-06-04T18:39:10 Last Updated: 2024-08-04T19:54:52.529Z Vendors: Huawei Products: P20 Problem Types: FRP bypass Description: There is Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 (C00E81R1P21T8). When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the Talkback mode and can perform some operations to access the setting page. As a result, the FRP function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-201904
alyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190424-01-frp-en
CVE ID: CVE-2019-5284 State: PUBLISHED Published: 2019-06-04T18:52:01 Last Updated: 2024-08-04T19:54:52.362Z Vendors: Huawei Products: Leland-AL00A Problem Types: DoS Description: There is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier than Leland-AL00A 9.1.0.111(C00E111R2P10T8). Remote attackers could trick the user into opening a malformed RTSP media stream to exploit this vulnerability. Successful exploit could cause the affected phone abnormal, leading to a DoS condition. (Vulnerability ID: HWPSIRT-2019-02004) Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190523-01-
Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190523-01-smartphone-en - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190523-01-smartphone-en
CVE ID: CVE-2019-5285 State: PUBLISHED Published: 2019-06-04T18:47:35 Last Updated: 2024-08-04T19:54:52.359Z Vendors: Huawei Products: S12700, S12700, S12700, S12700, S12700, S12700, S12700, S12700, S1700, S1700, S1700, S1700, S1700, S1700, S2300, S2300, S2300, S2300, S2300, S2300, S2300, S2700, S2700, S2700, S2700, S2700, S2700, S2700, S2700, S5300, S5300, S5300, S5300, S5300, S5300, S5300, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S600-E, S600-E, S600-E, S600-E, S600-E, S6300, S6300, S6300, S6300, S6300, S6300, S6300, S6300, S6700, S6700, S6700, S6700, S6700, S6700, S6700, S6700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7900, S7900, S7900, S9300,
, S6700, S6700, S6700, S6700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7900, S7900, S7900, S9300, S9300, S9300, S9300, S9300, S9300, S9300, S9300X, S9300X, S9300X, S9300X, S9700, S9700, S9700, S9700, S9700, S9700, S9700, S9700, S9700 Problem Types: DoS Description: Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109) Additional Analyst Notes: - CVE Program Container: References:
e (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109) Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en
CVE ID: CVE-2019-5286 State: PUBLISHED Published: 2019-06-13T15:40:37 Last Updated: 2024-08-04T19:54:51.841Z Vendors: n/a Products: HedEx Lite Problem Types: XSS Description: There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to initiate XSS attacks. Affects HedEx Lite versions earlier than V200R006C00SPC007. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190605-01-hedex-en