Huawei / UMA
18 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2017-15329 | Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends… | HIGH | 8.8 | Feb 15, 2018 |
| CVE-2017-8130 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information,… | MEDIUM | 6.5 | Nov 22, 2017 |
| CVE-2017-8129 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8128 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8127 | The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious l… | MEDIUM | 6.1 | Nov 22, 2017 |
| CVE-2017-8126 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8125 | The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craf… | MEDIUM | 6.1 | Nov 22, 2017 |
| CVE-2017-8124 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8123 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8122 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8121 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information,… | MEDIUM | 5.3 | Nov 22, 2017 |
| CVE-2017-8120 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8119 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2017-8118 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information,… | LOW | 2.3 | Nov 22, 2017 |
| CVE-2017-8117 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… | CRITICAL | 9.8 | Nov 22, 2017 |
| CVE-2016-7110 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vul… | CRITICAL | 9.8 | Sep 7, 2016 |
| CVE-2016-7109 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vul… | CRITICAL | 9.8 | Sep 7, 2016 |
| CVE-2016-7108 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords v… | MEDIUM | 6.5 | Sep 7, 2016 |
| CVE-2016-7107 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system… | HIGH | 7.5 | Sep 7, 2016 |
Showing 1 to 18 of 18 CVEs