CVE-2015-2251

The CVE describes an information-disclosure vulnerability in Huawei OceanStor UDS DeviceManager. A remote attacker could obtain sensitive data by injecting JavaScript into a patch loaded by DeviceManager. Affected software: Huawei OceanStor UDS devices with DeviceManager before V100R002C01SPC102....

CVE-2015-2251

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript...