Huawei Agile Controller Campus vulnerabilities

3 vulnerabilities

Known vulnerabilities in Huawei Agile Controller Campus, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2016-2214huaweiagile_controller-campus
EPSS score
0.76%
Cross-site scripting (XSS) vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.9.3CVE-2016-3081apachestruts+20KEV
EPSS score
96.05%
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.10CVE-2019-0708huaweiagile_controller-campus+45KEVRansomware
EPSS score
100.00%
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.