CVE-2007-5809 Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecifi...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hitachi cosminexus application server enterprise | <= 06_51_j | No fix listed |
| Hitachi cosminexus application server standard | <= 06_51_j | No fix listed |
| Hitachi cosminexus developer light version 6 | <= 06_51_j | No fix listed |
| Hitachi cosminexus developer professional version 6 | <= 06_51_j | No fix listed |
| Hitachi cosminexus developer standard version 6 | <= 06_51_j | No fix listed |
| Hitachi cosminexus server | <= 04_01 | No fix listed |
| Hitachi ucosminexus application server enterprise | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus application server standard | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus developer light | <= 06_71_d | No fix listed |
| Hitachi ucosminexus developer professional | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus developer standard | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus service architect | <= 07_50_01 | No fix listed |
| Hitachi ucosminexus service platform | <= 07_50_01 | No fix listed |
| Hitachi web server | = 01_00 | No fix listed |
| Hitachi web server | = 01_01 | No fix listed |
| Hitachi web server | = 01_01_d | No fix listed |
| Hitachi web server | = 01_02_d | No fix listed |
| Hitachi web server | = 01_02_e | No fix listed |
| Hitachi web server | = 02_00 | No fix listed |
| Hitachi web server | = 02_00_a | No fix listed |
| Hitachi web server | = 02_02 | No fix listed |
| Hitachi web server | = 02_04_b | No fix listed |
| Hitachi web server | = 02_06_a | No fix listed |
| Hitachi web server | = 03_00 | No fix listed |
| Hitachi web server | = 03_00_01 | No fix listed |
References
- 42027 vdb-entry
- 27421 third-party-advisory vendor-advisory
- www.hitachi-support.com
- 26271 vdb-entry
- ADV-2007-3666 vdb-entry