CVE-2017-8139

MEDIUM

HedEx Lite < V200R006C00 - Stored Cross-Site Scripting via Configuration File

Title source: llm

Description

HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users.

References (1)

Core 1

Core References

Issue Tracking, Vendor Advisory x_refsource_confirm

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20170531-01-hedex-en

Scores

CVSS v3 6.1

EPSS 0.0011

EPSS Percentile 29.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

huawei/hedex_lite < v200r006c00

Huawei Technologies Co., Ltd./HedEx Lite Earlier than V200R006C00 versions

Published Nov 22, 2017

Tracked Since Feb 18, 2026