Huawei Uma
20 CVEs affecting Huawei Uma. Latest disclosed: 2019-05-16. Critical: 12, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0708 | Critical | 9.8 | 2019-05-16 | A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the ta… |
CVE-2017-8129 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8128 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8126 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8124 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8123 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8122 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8120 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8119 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8117 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2016-7110 | Critical | 9.8 | 2016-09-07 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vul… |
CVE-2016-7109 | Critical | 9.8 | 2016-09-07 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vul… |
CVE-2017-15329 | High | 8.8 | 2018-02-15 | Huawei UMA V200R001C00 has a SQL injection vulnerability in the operation and maintenance module. An attacker logs in to the system as a common user and sends… |
CVE-2016-7107 | High | 7.5 | 2016-09-07 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system… |
CVE-2017-8130 | Medium | 6.5 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2016-7108 | Medium | 6.5 | 2016-09-07 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords v… |
CVE-2017-8127 | Medium | 6.1 | 2017-11-22 | The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious l… |
CVE-2017-8125 | Medium | 6.1 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craf… |
CVE-2017-8121 | Medium | 5.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8118 | Low | 2.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |