← Back

Cosminexus Enterprise

cosminexus_enterprise

Vendor: Hitachi • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2004-1478
2Hitachi
Macromedia
4Coldfusion
Cosminexus EnterpriseCosminexus Server+1 more
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.
CVE-2004-0928
2Hitachi
Macromedia
4Coldfusion
Cosminexus EnterpriseCosminexus Server+1 more
Apr 16, 2026
Oct 5, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request t...Show more
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".Show less