Huawei Technologies Co., Ltd. Uma
15 CVEs affecting Huawei Technologies Co., Ltd. Uma. Latest disclosed: 2018-02-15. Critical: 9, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8129 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8128 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8126 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8124 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8123 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8122 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8120 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8119 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8117 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-15329 | High | 8.8 | 2018-02-15 | Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends… |
CVE-2017-8130 | Medium | 6.5 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8127 | Medium | 6.1 | 2017-11-22 | The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious l… |
CVE-2017-8125 | Medium | 6.1 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craf… |
CVE-2017-8121 | Medium | 5.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8118 | Low | 2.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |