CVE-2017-8127

CVE-2017-8127 affects Huawei UMA product (V200R001). The issue is a cross-site scripting (XSS) vulnerability caused by insufficient input validation in UMA, enabling an attacker to craft malicious links or scripts to conduct XSS. The CVSS data indicates a networkaccessible vector with at least mi...

CVE-2017-8117

CVE-2017-8117 affects Huawei UMA product (software V200R001 and V300R001) with a privilege elevation vulnerability caused by insufficient validation/improper processing of parameters. An attacker could craft specific packets to exploit this and gain elevated privileges. Public sources classify th...

CVE-2017-8127

The UMA product with software V200R001 has a cross-site scripting XSS vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks...

CVE-2017-8123

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8122

CVE-2017-8122 affects Huawei UMA product (software V200R001). The vulnerability is a privilege elevation due to insufficient validation or improper processing of parameters, where an attacker could craft specific packets to gain elevated privileges. NVD data shows high base scores (CVSSv2: 7.5 / ...

CVE-2017-8130

The CVE-2017-8130 entry describes an information-leak vulnerability in Huawei UMA products. Affected software versions are V200R001 and V300R001, where an attacker could obtain sensitive information, leading to information leakage. The NVD data shows CVSSv3.0 base metrics: 6.5 (NETWORK, LOW compl...

CVE-2017-8125

CVE-2017-8125 affects Huawei UMA product (software V200R001 and V300R001). It is a cross-site scripting (XSS) vulnerability caused by insufficient input validation in the UMA component, enabling an attacker to craft malicious links/scripts to perform XSS. CVSS v3.0 base score 6.1 (NETWORK/LOW com...

CVE-2017-8129

CVE-2017-8129 affects Huawei UMA products (software V200R001 and V300R001). The vulnerability is a privilege-elevation issue caused by insufficient validation/improper processing of parameters, enabling an attacker to craft specific packets to gain elevated privileges. Public details include CVSS...

CVE-2017-8126

CVE-2017-8126 concerns the Huawei UMA product (software V200R001) with a privilege-elevation vulnerability caused by insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit this flaw and gain elevated privileges. The issue is documented ac...

CVE-2017-8124

CVE-2017-8124 affects Huawei UMA product (software V200R001). Root cause: insufficient validation or improper processing of parameters in the UMA component, enabling an attacker to craft specific packets to achieve privilege elevation. Impact: elevation of privileges. Exploitation status is not d...

CVE-2017-8119

The CVE-2017-8119 entry concerns Huawei UMA products (V200R001 and V300R001) with a privilege-elevation vulnerability caused by insufficient validation/improper processing of parameters. Attackers could craft specific packets to exploit these flaws to gain elevated privileges. Connected sources c...

CVE-2017-8118

CVE-2017-8118 affects Huawei UMA products (V200R001 and V300R001) with an information disclosure vulnerability. The issue could allow an attacker to obtain sensitive information, per NVD and Huawei PSIRT references. The Huawei advisory notes multiple UMA vulnerabilities and states these were anal...

CVE-2017-8117

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8121

The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak...

CVE-2017-8120

CVE-2017-8120 affects Huawei UMA products (V200R001 and V300R001) with a privilege-elevation vulnerability caused by insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these weaknesses to gain elevated privileges. Public sources (NVD ...

Security Advisory - SQL Injection Vulnerabilities in Huawei UMA Product

There is a SQL injection vulnerability in the operation and maintenance module of Huawei UMA Product. An attacker logs in to the system as a common user and sends crafted HTTP requests that contain malicious SQL statements to the affected system. Due to a lack of input validation on HTTP requests...

Huawei UMA Product Elevation of Privilege Vulnerability

Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. An elevation of privilege vulnerability exists in the Huawei UMA product. Due to...

Huawei UMA product cross-site scripting vulnerability (CNVD-2017-12920)

Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. A cross-site scripting vulnerability exists in the Huawei UMA product. Due to...

Huawei UMA Product Elevation of Privilege Vulnerability (CNVD-2017-12928)

Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. An elevation of privilege vulnerability exists in the Huawei UMA product. Due to...

Security Advisory - Multiple Vulnerabilities in UMA Products

The Unified Maintenance Audit UMA system provides a unified portal for O&M operations, controls and records users' O&M operations, and supports auditing by way of command display and video replay. The UMA product has the following vulnerabilities, which are introduced by software provided by...