Read the docs
TI-2019-03715 Aliases CVE-2019-5286GHSA-22v6-vh64-279g

Cross-site scripting in HedEx Lite

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to initiate XSS attacks. Affects HedEx Lite versions earlier than V200R006C00SPC007.

Why it matters now

EPSS 0.00713 53rd percentileScored 2026-11-07
Fix Fixed HedEx Lite: V200R006C00SPC007

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—HedEx Litebefore V200R006C00SPC007V200R006C00SPC007Patch availableCNA
  • HedEx Lite Vendor— Affected before V200R006C00SPC007 Fixed in V200R006C00SPC007 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:huawei:hedex_lite:*:*:*:*:*:*:*:*before v200r006c00spc007VulnerableHuawei
  • cpe:2.3:a:huawei:hedex_lite:*:*:*:*:*:*:*:* Versions before v200r006c00spc007 Vulnerable ·Huawei

Remediation

  • Fix · CNA HedEx Lite Fixed in V200R006C00SPC007

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5286
  2. 2026-10-03 Alias added: GHSA-22v6-vh64-279g

References

Advisory 1

  • TI-2017-05713 Cross-site request forgery in Huawei HedEx Lite CVSS 3.0HIGH 8.8
  • TI-2017-05712 Untrusted search path in Huawei HedEx Lite CVSS 3.0HIGH 7.8
  • TI-2017-05714 Cross-site scripting in Huawei HedEx Lite CVSS 3.0MEDIUM 6.1
  • TI-2017-05711 Information disclosure in Huawei HedEx Lite CVSS 3.0MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences