CVE-2016-4058: Huawei Policy Center

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to "special characters on pages."

Affected products

• Huawei Policy Center: version v100r003c00 only; version v100r003c10 only

Published 2016-09-27. Last modified 2026-06-17.