CVE-2021-21731

The CVE-2021-21731 issue is a CSRF vulnerability in the ZTE ZXCLOUD iRAI management page. The root cause is insufficient verification of request origins, allowing an attacker to submit malicious requests that can delete data on the affected device. Affected products/versions: ZXCLOUD iRAI prior t...

ZTE ZXCLOUD iRAI 跨站请求伪造漏洞

The ZTE ZXCLOUD iRAI is a virtualization appliance from China's ZTE ZTE. A cross-site request forgery vulnerability was previously present in the ZXCLOUD iRAI KVM-ProductV6.03.04 version, which allowed an attacker to submit a malicious request to delete data to an affected device...

PT-2021-14742 · Zxcloud · Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZXCLOUD iRAI versions prior to KVM-ProductV6.03.04 Description: A CSRF issue exists in the management page of the product due to insufficient verification of request origins, allowing an attacker to submit malicious requests and potentially...

CVE-2020-6876

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

Cross site scripting

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

CVE-2020-6876

The CVE-2020-6876 entry maps to a ZTE product (eVDC ZXCLOUD-iROSV6.03.04) with an XSS vulnerability caused by insufficient verification of client data in the WEB module. The issue enables a remote attacker to inject scripts into the web module, potentially stealing user cookies or altering page s...

ZTE ZXCLOUD GoldenData VAP Information Disclosure Vulnerability (CNVD-2020-00218)

ZTE ZXCLOUD GoldenData VAP is a set of big data solutions from ZTE Corporation ZTE, China. An information disclosure vulnerability exists in ZTE ZXCLOUD GoldenData VAP versions prior to 4.01.01.02. The vulnerability stems from errors in configuration and other errors in the network system or...

CVE-2019-3429

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

Information disclosure

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

Authorization

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

Design/Logic Flaw

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3431

The CVE-2019-3431 entry concerns ZTE ZXCLOUD GoldenData VAP: all versions up to 4.01.01.02 expose encryption problems that allow an attacker to sniff unencrypted accounts and passwords over the network to access the front-end system. The connected Red Hat/RedPrivacy/CNVD/NVD entries corroborate t...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3430

CVE-2019-3430 affects ZTE ZXCLOUD GoldenData VAP before version 4.01.01.02. All connected documents describe an information disclosure vulnerability that could allow an attacker to obtain sensitive data and potentially damage the system. The CNVD and RH Red Hat entries confirm the affected produc...

CVE-2019-3430

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system...

CVE-2019-3429

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

CVE-2019-3429

CVE-2019-3429 affects ZTE ZXCLOUD GoldenData VAP, with all versions prior to 4.01.01.02 vulnerable to a file-read vulnerability that allows an attacker to obtain log file information and disclose sensitive data. The linked sources consistently identify the affected product and version boundary (p...