Vulnerabilities > Huawei > Fusionsphere Openstack > v100r006c10

DATE CVE VULNERABILITY TITLE RISK
2017-11-22 CVE-2017-8168 Missing Encryption of Sensitive Data vulnerability in Huawei Fusionsphere Openstack V100R006C00Spc102(Nfv)/V100R006C10
FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an information leak vulnerability.
low complexity
huawei CWE-311
4.3
2017-11-22 CVE-2017-8135 Command Injection vulnerability in Huawei Fusionsphere Openstack V100R006C00/V100R006C10
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.
low complexity
huawei CWE-77
8.8
2017-11-22 CVE-2017-8134 Command Injection vulnerability in Huawei Fusionsphere Openstack V100R006C00/V100R006C10
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.
low complexity
huawei CWE-77
8.8
2017-11-22 CVE-2017-8132 Command Injection vulnerability in Huawei Fusionsphere Openstack V100R006C00/V100R006C10
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.
low complexity
huawei CWE-77
8.8
2017-11-22 CVE-2017-8131 Command Injection vulnerability in Huawei Fusionsphere Openstack V100R006C00/V100R006C10
The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.
low complexity
huawei CWE-77
8.8
2017-11-22 CVE-2017-2718 Command Injection vulnerability in Huawei Fusionsphere Openstack V100R006C00/V100R006C10
FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port.
low complexity
huawei CWE-77
8.8