Vulnerabilities > Huawei > Hedex Lite > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-06-13 CVE-2019-5286 Cross-site Scripting vulnerability in Huawei Hedex Lite V200R006C00
There is a reflection XSS vulnerability in the HedEx products.
network
low complexity
huawei CWE-79
6.1
2017-11-22 CVE-2017-8139 Cross-site Scripting vulnerability in Huawei Hedex Lite
HedEx Earlier than V200R006C00 versions have the stored cross-site scripting (XSS) vulnerability.
network
low complexity
huawei CWE-79
6.1
2017-11-22 CVE-2017-8136 Information Exposure vulnerability in Huawei Hedex Lite
HedEx Earlier than V200R006C00 versions has an arbitrary file download vulnerability.
local
low complexity
huawei CWE-200
5.5