Approved changes feed: RSS · Atom

cpe:2.3:a:huawei:policy_center:v100r003c10:*:*:*:*:*:*:*

part: a version: v100r003c10 update: *

VendorHuawei (1cc7ae8f-602e-5c48-b475-b8c42c69e952)
ProductPolicy Center (9af5201d-d6bf-51ed-addb-28518d7623b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4058 vulnerable 2026-06-08 05:07:46.620816 Details available
Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to "special characters on pages."
Published: 2016-09-27T15:00:00.000Z
Updated: 2024-08-06T00:17:30.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2808 vulnerable 2026-06-08 05:06:35.952335 Details available
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
Published: 2015-04-01T00:00:00.000Z
Updated: 2026-05-28T12:53:51.914Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.