CVE-2014-4189

Published: Jun 17, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (13)

Products: Hitachi: Jp1/performance Management Manager Web Option, Tuning Manager

Hitachi

2 products

Jp1/performance Management Manager Web Option

Tuning Manager

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Hitachi Jp1/performance Management Manager Web Option	Version 07-00
Hitachi Jp1/performance Management Manager Web Option	Version 07-00
Hitachi Jp1/performance Management Manager Web Option	Version 07-54
Hitachi Jp1/performance Management Manager Web Option	Version 07-54
Hitachi Tuning Manager	Version 6.0.0
Hitachi Tuning Manager	Version 6.0.0
Hitachi Tuning Manager	Version 7.1.0
Hitachi Tuning Manager	Version 7.6.1
Hitachi Tuning Manager	Version 7.6.1 05
Hitachi Tuning Manager	Version 8.0.0
Hitachi Tuning Manager	Version 8.0.0
Hitachi Tuning Manager	Version 8.0.0 03
Hitachi Tuning Manager	Version 8.0.0 03