Priority MEDIUM 41
FusionCompute 8.0.0 have a command injection vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01306 · Published 2020-08-17 · No fix listed CWE-77
Priority MEDIUM 41
FusionCompute 8.0.0 have an insufficient authentication vulnerability.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00775 · Published 2020-08-17 · No fix listed CWE-287
Priority MEDIUM 40
There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00946 · Published 2021-11-23 · No fix listed CWE-77
Priority MEDIUM 40
There is an improper interface design vulnerability in Huawei product.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0043 · Published 2024-12-27 · No fix listed CWE-451
Priority LOW 35
There is a privilege escalation vulnerability in Huawei FusionCompute product.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00113 · Published 2024-12-27 · No fix listed CWE-269
Priority LOW 34
There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00657 · Published 2021-09-28 · No fix listed CWE-434
Priority LOW 34
FusionCompute 8.0.0 has an information disclosure vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00777 · Published 2020-08-14 · No fix listed
Priority LOW 34
Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01036 · Published 2020-11-30 · No fix listed CWE-77
Priority LOW 33
There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00898 · Published 2021-09-28 · No fix listed CWE-77
Priority LOW 33
FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2020-12-01 · No fix listed CWE-269
Priority LOW 33
FusionCompute 8.0.0 have local privilege escalation vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00229 · Published 2020-08-10 · No fix listed
Priority LOW 31
Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01016 · Published 2016-09-26 · No fix listed CWE-200
Priority LOW 31
Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource consumption) via a large number of crafted packets.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01011 · Published 2016-06-30 · No fix listed CWE-399
Priority LOW 30
FusionCompute 8.0.0 has an information leak vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00607 · Published 2020-08-21 · No fix listed
Priority LOW 29
Huawei FusionComput 8.0.0 have an improper authorization vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00236 · Published 2020-07-31 · No fix listed
Priority LOW 28
FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine.
CVSS 3.0MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00199 · Published 2017-11-22 · No fix listed CWE-732
Priority LOW 24
There is an information leakage vulnerability in FusionCompute 6.5.1, eCNS280_TD V100R005C00 and V100R005C10.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00172 · Published 2021-11-23 · No fix listed CWE-532
Priority LOW 21
There is an insufficient input validation vulnerability in FusionCompute 8.0.0.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00533 · Published 2021-05-27 · No fix listed CWE-20
Priority LOW 21
Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00597 · Published 2016-04-14 · No fix listed CWE-200
Priority LOW 20
FusionCompute 8.0.0 has an information disclosure vulnerability.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00224 · Published 2020-08-14 · No fix listed
Priority LOW 19
FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00114 · Published 2020-11-12 · No fix listed CWE-326