CVE-2016-6840: Huawei Oceanstor Ism

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLogin_CgiEntry and possibly other unspecified vectors.

Affected products

• Huawei Oceanstor Ism: version v200r001c01 only; version v200r001c02 only; version v200r001c03 only

Published 2016-09-26. Last modified 2026-06-17.