Improper input validation in Hitachi Ucosminexus Application Server Enterprise
CVE-2007-5281
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.
Affected products
- Hitachi Ucosminexus_application_server_enterprise — versions 07_50
- Hitachi Ucosminexus_application_server_standard — versions 7_50
- Hitachi Ucosminexus_client — versions 07_50
- Hitachi Ucosminexus_developer_professional — versions 07_50
- Hitachi Ucosminexus_developer_standard — versions 07_50
- Hitachi Ucosminexus_operator — versions 07_50
- Hitachi Ucosminexus_service_architect — versions 7_50
- Hitachi Ucosminexus_service_platform — versions 7_50
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)