Security Advisory - XML Bomb Vulnerability in AnyOffice

AnyOffice Enterprise Mobile Management (EMM) is a module of the AnyOffice, which provides the mobile terminal management function.

The XML Bomb vulnerability in the AnyOffice EMM could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb. (Vulnerability ID: HWPSIRT-2016-08063)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-8275.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-anyoffice-en