CVE-2017-15312

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-12-22 · updated 2026-06-17
Weakness: CWE-79

Description

Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. A remote authenticated attacker could exploit this vulnerability to inject malicious scripts in the affected device.

Affected products

Huawei Technologies Co., Ltd. SmartCare: v200r003c10

References

http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en
http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171201-01-smartcare-en

Get alerted when CVE-2017-15312 or the next vulnerability affects your stack