CVE-2016-8789

Huawei eSpace IAD (hardware/firmware: V300R001C03, V300R001C04, V300R001C06, V300R001C20, V300R001C07) contains a reflected cross-site scripting (XSS) vulnerability that can be triggered when a user clicks a URL containing malicious scripts. The issue allows an attacker to obtain user information...

CVE-2016-8789

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

Security Advisory - XSS Vulnerability in Huawei eSpace IAD

Huawei eSpace Integrated Access Device IAD has a reflected cross-site scripting XSS vulnerability. An attacker could trick a user into clicking a URL containing malicious scripts. Then the user's browser may receive a response from the eSpace IAD and execute the malicious scripts. Successful...