CVE-2004-2497

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected (13)

Products: Hitachi: Web Page Generator, Web Page Generator Enterprise

Hitachi

2 products

Web Page Generator

Web Page Generator Enterprise

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Hitachi Web Page Generator	Version 01_00
Hitachi Web Page Generator	Version 01_01_c
Hitachi Web Page Generator	Version 02_00
Hitachi Web Page Generator	Version 02_00_c
Hitachi Web Page Generator Enterprise	Version 03_00
Hitachi Web Page Generator Enterprise	Version 03_02_c
Hitachi Web Page Generator Enterprise	Version 03_03
Hitachi Web Page Generator Enterprise	Version 03_03_c
Hitachi Web Page Generator Enterprise	Version 03_03_d
Hitachi Web Page Generator Enterprise	Version 04_00
Hitachi Web Page Generator Enterprise	Version 04_00_c
Hitachi Web Page Generator Enterprise	Version 04_01
Hitachi Web Page Generator Enterprise	Version 04_01_b