VulnerabilityModified
CVE-2019-5286
There is a reflection XSS vulnerability in the HedEx products.
MEDIUM 6.1EPSS 0.71%
Does this matter?
Lower severity and a low EPSS score (0.71%). Track it; it rarely justifies an emergency change on its own.
Description
There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to initiate XSS attacks. Affects HedEx Lite versions earlier than V200R006C00SPC007.
- CVSS 3.0
- 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.71% probability · 52th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- huawei/hedex lite
- Source
- psirt@huawei.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.