CVE-2017-8125

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-79

Description

The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.

Affected products

Huawei Technologies Co., Ltd. UMA: v200r001, v300r001

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en

Get alerted when CVE-2017-8125 or the next vulnerability affects your stack