Vulnerability Bulletins

CVE-2016-6840

   
Affected software HUAWEI
 
Cross-site scripting (XSS) vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLogin_CgiEntry and possibly other unspecified vectors.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2016-6840