VIR Vulnerability Intelligence Relay

CVE-2016-8275

medium
Published 2017-04-02 · Modified 2026-05-13
CVSS v3
6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2
3.5
VIR risk
6.5

Description

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.

Predictions

Exploit likelihood
75%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@huawei.com — http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160907-01-anyoffice-en

Application impact
VendorProductVersionsFixed
huaweianyofficev200r006c00

References

CWEs

CWE-20

Verify integrity in audit chain (admin only). AS-IS.