CVE-2017-8127

The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.

Date published : 2017-11-22

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170612-01-uma-en