What is CVE-2018-7976?

CVE-2018-7976 is a medium-severity vulnerability in Huawei Espace Desktop, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2018-06-01.

How severe is CVE-2018-7976?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Huawei Espace Desktop

CVE-2018-7976

There is a stored cross-site scripting (XSS) vulnerability in Huawei eSpace Desktop V300R001C00 and V300R001C50 version. Due to the insufficient validation of the input, an authenticated, remote attacker could exploit this vulnerability to send abnormal messages to the system and perform a XSS attack. A successful exploit could cause the eSpace Desktop to hang up, and the function will restore to normal after restarting the eSpace Desktop.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2018-06-01 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

EPSS exploit prediction

EPSS: 0.004 (35.5th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 36th percentile — 35.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Huawei Espace Desktop — versions 300r001c00, 300r001c50
Huawei Technologies Co., Ltd. Espace Desktop — versions V300R001C00, V300R001C50

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-xss-en (Vendor Advisory)

Frequently asked questions

What is CVE-2018-7976?: CVE-2018-7976 is a medium-severity vulnerability in Huawei Espace Desktop, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2018-06-01.
How severe is CVE-2018-7976?: Medium severity. CVSS v3 base score is 5.4 out of 10.