medium6.1
CVE-2017-8139
HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability.
Impact
HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Hedex Lite | before v200r006c00 |