CVE-2021-22410

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...

CVE-2021-22410

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...

CVE-2021-22410

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...

Cross site scripting

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...

CVE-2021-22410

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...

CVE-2021-22410

CVE-2021-22410 affects Huawei iMaster NCE-Fabric V100R019C10. A client-side module fails to adequately validate input, enabling XSS when an attacker modifies input after logging in. Impact: potential disruption of normal client service. Connected sources (Huawei PSIRT advisory and multiple CVE re...

PT-2021-15033

Name of the Vulnerable Software and Affected Versions: iMaster NCE-Fabric version V100R019C10 Description: The issue is related to a XSS injection vulnerability. A module of the client does not verify the input sufficiently, allowing attackers to exploit this by modifying input after logging onto...

CVE-2021-22410: Improper Neutralization of Input During Web Page Generation

There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input after logging onto the client. This may compromise the normal service of the client...

Huawei IMaster Nce-Fabric 跨站脚本漏洞

Huawei IMaster Nce-Fabric is a network automation and intelligence platform that integrates management, control, analysis, and artificial intelligence Ai functions from Huawei China.A security vulnerability exists in Huawei iMaster NCE-Fabric, which stems from a client-side module that fails to...

CVE-2021-22299

There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...

CVE-2021-22299

CVE-2021-22299 describes a local privilege escalation in certain Huawei products. The vulnerability affects multiple ManageOne, NFV_FusionSphere, SMC2.0, and iMaster MAE-M release lines (for example ManageOne versions 6.5.0 and 8.0.x series, NFV_FusionSphere 6.5.x and 8.0.x, SMC2.0 V600R019C00/C1...

CVE-2021-22299

There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...

CVE-2021-22299: Undefined Security Weakness

There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...

PT-2021-14937

Name of the Vulnerable Software and Affected Versions: ManageOne versions 6.5.0 through 8.0.RC3.SPC100 NFV FusionSphere versions 6.5.1.SPC23 through 8.0.0.SPC12 SMC2.0 versions V600R019C00 through V600R019C10 iMaster MAE-M version MAE-TOOLFusionSphereBasicTemplate Euler X86V100R020C10SPC220...