Vulnerability in Hitachi Groupmax Collaboration Portal
CVE-2007-3043
Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.012 (67.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 68th percentile — 67.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- Hitachi Groupmax Collaboration Portal — versions 7_20_e, 7_30_d
- Hitachi Groupmax Collaboration Web Client — versions forum_file_share_7_20_d, forum_file_share_7_30_c
- Hitachi Ucosminexus Collaboration Portal — versions 6_20_e, 6_30_d, forum_file_share_6_20_d
References
- www.securityfocus.com/bid/24263 (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/34659 (vdb-entry)
- osvdb.org/36828 (vdb-entry)
- www.vupen.com/english/advisories/2007/2020 (vdb-entry)
- www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html
- secunia.com/advisories/25507 (Vendor Advisory, third-party-advisory)