Huawei Policy Center vulnerabilities

2 CVEs affecting Huawei Policy Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4058, published 2016-09-27.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-2808, published 2015-04-01. Low severity, CVSS 3.7. EPSS: 73.9% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to…
• CVE-2016-4058, published 2016-09-27. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to "special…