CVE-2007-0514

Published: Jan 26, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.

Affected (20)

Products: Hitachi: Cosminexus Application Server, Cosminexus Application Server Version 5, Cosminexus Developer Light Version 6, Cosminexus Developer Professional Version 6, Cosminexus Developer Standard Version 6, Cosminexus Developer Version 5, Cosminexus Server Enterprise Edition, Cosminexus Server Standard Edition, Cosminexus Server Standard Edition Version 4, Cosminexus Server Web Edition, Cosminexus Server Web Edition Version 4, Hitachi Web Server, Ucosminexus Application Server Enterprise, Ucosminexus Application Server Smart Edition, Ucosminexus Application Server Standard, Ucosminexus Developer Light, Ucosminexus Developer Standard, Ucosminexus Service Architect, Ucosminexus Service Platform

Hitachi

19 products

Cosminexus Application Server

Cosminexus Application Server Version 5

Cosminexus Developer Light Version 6

Cosminexus Developer Professional Version 6

Cosminexus Developer Standard Version 6

Cosminexus Developer Version 5

Cosminexus Server Enterprise Edition

Cosminexus Server Standard Edition

Cosminexus Server Standard Edition Version 4

Cosminexus Server Web Edition

Cosminexus Server Web Edition Version 4

Hitachi Web Server

Ucosminexus Application Server Enterprise

Ucosminexus Application Server Smart Edition

Ucosminexus Application Server Standard

Ucosminexus Developer Light

Ucosminexus Developer Standard

Ucosminexus Service Architect

Ucosminexus Service Platform

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Hitachi Cosminexus Application Server	All versions
Hitachi Cosminexus Application Server	Version 6
Hitachi Cosminexus Application Server Version 5	All versions
Hitachi Cosminexus Developer Light Version 6	All versions
Hitachi Cosminexus Developer Professional Version 6	All versions
Hitachi Cosminexus Developer Standard Version 6	All versions
Hitachi Cosminexus Developer Version 5	All versions
Hitachi Cosminexus Server Enterprise Edition	All versions
Hitachi Cosminexus Server Standard Edition	All versions
Hitachi Cosminexus Server Standard Edition Version 4	All versions
Hitachi Cosminexus Server Web Edition	All versions
Hitachi Cosminexus Server Web Edition Version 4	All versions
Hitachi Hitachi Web Server	All versions
Hitachi Ucosminexus Application Server Enterprise	All versions
Hitachi Ucosminexus Application Server Smart Edition	All versions
Hitachi Ucosminexus Application Server Standard	All versions
Hitachi Ucosminexus Developer Light	All versions
Hitachi Ucosminexus Developer Standard	All versions
Hitachi Ucosminexus Service Architect	All versions
Hitachi Ucosminexus Service Platform	All versions