Improper input validation in Hitachi Cosminexus Agent
CVE-2007-5282
Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (65.7th percentile) — read the EPSS interpretation.
Affected products
- Hitachi Cosminexus_agent — versions 03_00, 03_01, 03_02
- Hitachi Cosminexus_library_standard — versions 04_00, 04_01
- Hitachi Cosminexus_library_web — versions 04_00, 04_01
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)