XSS in Hitachi Cosminexus Application Server Enterprise
CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.011 (61.3th percentile) — read the EPSS interpretation.
Affected products
- Hitachi Cosminexus_application_server_enterprise
- Hitachi Cosminexus_application_server_standard
- Hitachi Cosminexus_developer_light_version_6
- Hitachi Cosminexus_developer_professional_version_6
- Hitachi Cosminexus_developer_standard_version_6
- Hitachi Cosminexus_server
- Hitachi Ucosminexus_application_server_enterprise
- Hitachi Ucosminexus_application_server_standard
- Hitachi Ucosminexus_developer_light
- Hitachi Ucosminexus_developer_professional
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)