Latest vulnerabilities for "h3c ssl vpn"

Where

Sort:

Versions

2022-07-10

H3C SSL VPNH3C SSL VPN n/a Username Enumeration via Login Script Credential Verification

Risk 43

Severity

7.5

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the loginsubmit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.

First published (updated )

CVE-2022-50800

H3C SSL VPNXSS

Risk 38

Severity

6.1

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.

First published (updated )

CVE-2022-35416

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.