Known Vulnerabilities for Manageone by Huawei
Listed below are 10 of the newest known vulnerabilities associated with "Manageone" by "Huawei".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-37131 | There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privileg... | 6.8 - MEDIUM | 2021-10-27 | 2021-10-29 |
| CVE-2021-22409 | There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a f... | 5.3 - MEDIUM | 2021-05-20 | 2022-07-12 |
| CVE-2021-22397 | There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of verifi... | 6.7 - MEDIUM | 2021-08-02 | 2022-07-12 |
| CVE-2021-22340 | There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read b... | 4.1 - MEDIUM | 2021-06-29 | 2021-07-07 |
| CVE-2021-22339 | There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient veri... | 6.5 - MEDIUM | 2021-05-20 | 2021-05-26 |
| CVE-2021-22314 | There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perfo... | 7.8 - HIGH | 2021-03-22 | 2022-07-12 |
| CVE-2021-22311 | There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the... | 7.2 - HIGH | 2021-03-22 | 2021-03-24 |
| CVE-2021-22299 | There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft spec... | 7.8 - HIGH | 2021-02-06 | 2022-07-12 |
| CVE-2021-22298 | There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific S... | 6.5 - MEDIUM | 2021-02-06 | 2022-03-29 |
| CVE-2021-22293 | Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerabi... | 7.5 - HIGH | 2021-02-06 | 2021-02-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Huawei | Manageone | 8.0.2 | All | All | All |
| Application | Huawei | Manageone | 8.0.1 | All | All | All |
| Application | Huawei | Manageone | 8.0.0 | All | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b010 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b020 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b030 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b040 | All | All |
| Application | Huawei | Manageone | 6.5.1.1 | b050 | All | All |
| Application | Huawei | Manageone | 6.5.0 | All | All | All |
| Application | Huawei | Manageone | 6.5 | rc2.b050 | All | All |