Vulnerabilities > Huawei > Fusioncompute
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-08-17 | CVE-2020-9242 | OS Command Injection vulnerability in Huawei Fusioncompute 8.0.0 FusionCompute 8.0.0 have a command injection vulnerability. | 6.5 |
| 2020-08-14 | CVE-2020-9229 | Information Exposure vulnerability in Huawei Fusioncompute 8.0.0 FusionCompute 8.0.0 has an information disclosure vulnerability. | 2.1 |
| 2020-08-14 | CVE-2020-9228 | Information Exposure vulnerability in Huawei Fusioncompute 8.0.0 FusionCompute 8.0.0 has an information disclosure vulnerability. | 5.0 |
| 2020-08-10 | CVE-2020-9078 | Improper Privilege Management vulnerability in Huawei Fusioncompute 8.0.0 FusionCompute 8.0.0 have local privilege escalation vulnerability. | 4.6 |
| 2020-07-31 | CVE-2020-9248 | Incorrect Authorization vulnerability in Huawei Fusioncompute 8.0.0 Huawei FusionComput 8.0.0 have an improper authorization vulnerability. | 4.6 |
| 2017-11-22 | CVE-2017-8158 | Incorrect Permission Assignment for Critical Resource vulnerability in Huawei Fusioncompute V100R005C00/V100R005C10 FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine. | 4.9 |
| 2016-09-26 | CVE-2016-6827 | Information Exposure vulnerability in Huawei Fusioncompute Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors. | 4.0 |
| 2016-06-30 | CVE-2016-4057 | Resource Management Errors vulnerability in Huawei Fusioncompute V100R005C00 Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource consumption) via a large number of crafted packets. | 6.8 |
| 2016-04-14 | CVE-2015-8336 | Permissions, Privileges, and Access Controls vulnerability in Huawei Fusioncompute Firmware Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors. | 4.0 |