Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2016-4058
HistorySep 27, 2016 - 3:59 p.m.

CVE-2016-4058

2016-09-2715:59:00
CWE-79
mitre
web.nvd.nist.gov
19
cve-2016-4058
cross-site scripting
xss
huawei policy center
v100r003c10spc020
nvd
security vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

28.6%

JSON

Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to “special characters on pages.”

Affected configurations

Nvd
Node
huaweipolicy_centerMatchv100r003c00
OR
huaweipolicy_centerMatchv100r003c10
VendorProductVersionCPE
huaweipolicy_centerv100r003c00cpe:2.3:a:huawei:policy_center:v100r003c00:*:*:*:*:*:*:*
huaweipolicy_centerv100r003c10cpe:2.3:a:huawei:policy_center:v100r003c10:*:*:*:*:*:*:*

Related

prion 1
cvelist 1
huawei 1
nvd 1
prion
prion
Cross site scripting
2016-09-27 15:59:00
cvelist
cvelist
CVE-2016-4058
2016-09-27 15:00:00
huawei
huawei
Security Advisory - Cross-Site Script Vulnerability in Policy Center
2016-04-19 00:00:00
nvd
nvd
CVE-2016-4058
2016-09-27 15:59:00

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

28.6%

JSON
Related for CVE-2016-4058
prion1cvelist1huawei1nvd1