Vulnerability in Hitachi Jp1-Hicommand Device Manager
CVE-2007-3623
Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
EPSS: 0.019 (77.8th percentile) — read the EPSS interpretation.
Affected products
- Hitachi Jp1-hicommand_device_manager — versions 02_30, 05_00, 05_10
- Hitachi Jp1-hicommand_global_link_availability_manager — versions 05_00
- Hitachi Jp1-hicommand_replication_monitor — versions 04_00, 05_00, 05_50
- Hitachi Jp1-hicommand_tiered_storage_manager — versions 04_00, 04_30, 05_00
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)