CVE-2021-22331

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product versions include HUAWEI P30 versions earlier than 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.120(C00E120R2P5), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R7P3), 11.0.0.138(C432E8R2P3), 11.0.0.138(C461E4R3P3), 11.0.0.138(C605E4R1P3), and 11.0.0.138(C636E4R3P3).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-74

Affected software

No affected versions have been published.

Timeline

Published
Apr 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-223327.5There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800.CVE-2021-223339.8There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause cCVE-2021-223347.4There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirectCVE-2021-223357.8There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may causCVE-2021-223367.5There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cauCVE-2021-223375.3There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of usCVE-2021-223385.3There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input CVE-2021-223396.5There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of theCVE-2021-22345.3Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. CVE-2021-223404.1There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threCVE-2021-223414.9There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege caCVE-2021-223424.9There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attac
CVE-2021-22331: High severity, CVSS 7.5 | Vulnix