CVE-2019-5286

Medium

Description

There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to initiate XSS attacks. Affects HedEx Lite versions earlier than V200R006C00SPC007.

SeverityMedium

CVSS6.1

Exploit probability—

ProductHuawei Hedex Lite

PublishedJun 13, 2019

First seenJun 13, 2019

How to fix

Update

huawei hedex_litev200r006c00spc007 or later

Affected products

Product	Affected versions	Fixed in
huawei hedex_lite	v < v200r006c00spc007	v200r006c00spc007

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.