CVE-2016-6898

Severity: medium (CVSS 6.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-07 · updated 2026-06-17
Weakness: CWE-284

Description

XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document.

Affected products

Huawei E9000 Chassis: through v100r001c00

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en
http://www.securityfocus.com/bid/92620
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en
http://www.securityfocus.com/bid/92620

Get alerted when CVE-2016-6898 or the next vulnerability affects your stack