Cross site scripting

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

Reflective Cross-Site Scripting Vulnerability in Huawei eSpace IAD Products

Huawei eSpace IAD is an integrated access device for Voice over IP and Unified Communications solutions from Huawei, China. A reflective cross-site scripting vulnerability exists in the Huawei eSpace IAD product. An attacker can exploit the vulnerability to run a malicious script in a user's...

Security Advisory - XSS Vulnerability in Huawei eSpace IAD

Huawei eSpace Integrated Access Device IAD has a reflected cross-site scripting XSS vulnerability. An attacker could trick a user into clicking a URL containing malicious scripts. Then the user's browser may receive a response from the eSpace IAD and execute the malicious scripts. Successful...

Security Advisory - Information Leak Vulnerability in Huawei eSpace IAD

Huawei eSpace IAD products have an information leak vulnerability. Some Web pages do not verify the validity of the permission. An attacker can check and download the fault information by access special URL. Vulnerability ID: HWPSIRT-2016-08001 This vulnerability has been assigned a CVE ID:...

Huawei eSpace IAD Information Disclosure

Title: Huawei eSpace IAD Remote Information Disclosure Vulnerability Software : eSpace IAD Software Version : Equipment type : eSpace IAD208EM PCB version : AG21CSPG VER.A Product name : TS0801 and TS0802 Program version : V300R001C07SPC800 BIOS version : 1035 Slic version : 000 CPLD version :...