CVE-2017-8125: XSS
The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8125?
CVE-2017-8125 is considered a high-severity vulnerability due to its potential impact on application security through cross-site scripting.
How do I fix CVE-2017-8125?
To mitigate CVE-2017-8125, ensure that input validation is properly implemented to sanitize and validate user inputs on affected Huawei UMA versions.
What software versions are affected by CVE-2017-8125?
CVE-2017-8125 affects Huawei UMA software versions V200R001 and V300R001.
Can CVE-2017-8125 be exploited remotely?
Yes, CVE-2017-8125 can be exploited remotely if an attacker sends users a malicious link that executes cross-site scripting.
What are the potential impacts of CVE-2017-8125?
The potential impacts of CVE-2017-8125 include unauthorized access to sensitive information and the ability to execute arbitrary scripts in users' browsers.