CVE Intelligence

Hangzhou H3C Technologies H3C SSL VPN vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Hangzhou H3C Technologies H3C SSL VPN: 1 record(s), with affected versions and fixes.

CVE-2022-50800 High · 7.5 CWE-203 Dec 30, 2025
H3C SSL VPN n/a Username Enumeration via Login Script Credential Verification
H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.