medium6.1
CVE-2017-8125
The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation.
Impact
The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Uma | Versions v200r001, v300r001 |