CVE-2016-6898
XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack...
CVE-2016-6898 is a medium vulnerability (CVSS 6.6) in Huawei E9000 Chassis, published September 7, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. No source names a fixed version.
XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document.
- Record
CVE-2016-6898- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:N/AC:M/Au:S/C:P/I:N/A:P - Weakness
- CWE-284
- Updated
- 2026-11-02
CVE List No score
XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document.
- Record
CVE-2016-6898- Updated
- 2026-11-02
EUVDEUVD-2016-7783 No score
XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document.
- Record
EUVD-2016-7783- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fq2r-565r-rw92
XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack...
XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document.
- Record
GHSA-fq2r-565r-rw92- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |