Policy Center

DATE	CVE	VULNERABILITY TITLE	RISK
2016-09-27	CVE-2016-4058	Cross-site Scripting vulnerability in Huawei Policy Center V100R003C00/V100R003C10 Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to "special characters on pages." network huawei CWE-79	3.5
2016-04-12	CVE-2016-2405	Permissions, Privileges, and Access Controls vulnerability in Huawei Policy Center Firmware V100R003C10 Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to gain privileges and cause a denial of service (system crash) via a crafted URL. network low complexity huawei CWE-264 critical	9.0