cveboard RSS feed

CVE-2020-6872

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2020
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

<R5300G4?R8500G4?R5500G4>

Vendor
n/a
Product
<R5300G4?R8500G4?R5500G4>
Platforms
Unknown
Default status
Unknown
<R5300G4?R8500G4?R5500G4> · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
<R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020affectedUnavailableUnavailableUnavailableNone listed
R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020affectedUnavailableUnavailableUnavailableNone listed
R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>affectedUnavailableUnavailableUnavailableNone listed