CVE-2019-5286

There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to initiate XSS attacks. Affects HedEx Lite versions earlier than V200R006C00SPC007.

• CWE-79

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190605-01-hedex-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190605-01-hedex-enVendor Advisory

Published

Jun 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5280The SIP TLS module of Huawei CloudLink Phone 7900 with V600R…
• CVE-2019-5281There is an information leak vulnerability in some Huawei ph…
• CVE-2019-5282Bastet module of some Huawei smartphones with Versions earli…7.8
• CVE-2019-5283There is Factory Reset Protection (FRP) bypass security vuln…
• CVE-2019-5284There is a DoS vulnerability in RTSP module of Leland-AL00A …6.5
• CVE-2019-5285Some Huawei S series switches have a DoS vulnerability. An u…
• CVE-2019-5287P30 smart phones with versions earlier than ELLE-AL00B 9.1.0…7.8
• CVE-2019-5288P30 smart phones with versions earlier than ELLE-AL00B 9.1.0…7.8
• CVE-2019-5289Gauss100 OLTP database in ManageOne with versions of 6.5.0 h…7.5
• CVE-2019-5290Huawei S5700 and S6700 have a DoS security vulnerability. At…6.5
• CVE-2019-5291Some Huawei products have an insufficient verification of da…5.9
• CVE-2019-5292Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the ve…3.3