Huawei Document Security Management vulnerabilities

2 CVEs affecting Huawei Document Security Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-2406, published 2017-03-20.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-2406, published 2017-03-20. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by…
• CVE-2015-8303, published 2016-01-08. Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei Document Security Management (DSM) with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by…