CVE-2007-5809
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD
Description
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Affected (44)
Products: Hitachi: Cosminexus Application Server Enterprise, Cosminexus Application Server Standard, Cosminexus Developer Light Version 6, Cosminexus Developer Professional Version 6, Cosminexus Developer Standard Version 6, Cosminexus Server, Ucosminexus Application Server Enterprise, Ucosminexus Application Server Standard, Ucosminexus Developer Light, Ucosminexus Developer Professional, Ucosminexus Developer Standard, Ucosminexus Service Architect, Ucosminexus Service Platform, Web Server
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 06_51_j | |
| Up to 06_51_j | |
| Up to 06_51_j | |
| Up to 06_51_j | |
| Up to 06_51_j | |
| Up to 04_01 | |
| Up to 07_50_01 | |
| Up to 07_50_01 | |
| Up to 06_71_d | |
| Up to 07_50_01 | |
| Up to 07_50_01 | |
| Up to 07_50_01 | |
| Up to 07_50_01 | |
| Version 01_00 |
References (10)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.