Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-11-22	CVE-2017-8130	Information Exposure vulnerability in Huawei UMA V200R001/V300R001 The UMA product with software V200R001 and V300R001 has an information leak vulnerability. network low complexity huawei CWE-200	6.5
2017-11-22	CVE-2017-8127	Cross-site Scripting vulnerability in Huawei UMA V200R001 The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. network low complexity huawei CWE-79	6.1
2017-11-22	CVE-2017-8125	Cross-site Scripting vulnerability in Huawei UMA V200R001/V300R001 The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. network low complexity huawei CWE-79	6.1
2017-11-22	CVE-2017-8121	Information Exposure vulnerability in Huawei UMA V200R001/V300R001 The UMA product with software V200R001 and V300R001 has an information leak vulnerability. network low complexity huawei CWE-200	5.3
2016-09-07	CVE-2016-7108	Information Exposure vulnerability in Huawei UMA V200R001/V200R001C00Spc100/V200R001C00Spc200 Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors. network low complexity huawei CWE-200	6.5