CVE-2016-4058

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-27 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to "special characters on pages."

Affected products

Huawei Policy Center: v100r003c00, v100r003c10

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-policycenter-en
http://www.securityfocus.com/bid/86546
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-policycenter-en
http://www.securityfocus.com/bid/86546

Get alerted when CVE-2016-4058 or the next vulnerability affects your stack