CVEvulnerability
CVE-2004-2492
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter.
Affected configurations
• hitachi groupmax world wide web desktop 05 00
• hitachi groupmax world wide web desktop 05 11 f
• hitachi groupmax world wide web desktop 05 11 i
• hitachi groupmax world wide web desktop 05 11 j
• hitachi groupmax world wide web desktop 06 00
• hitachi groupmax world wide web desktop 06 50 b
• hitachi groupmax world wide web desktop 06 50 c
• hitachi groupmax world wide web desktop 06 51
• hitachi groupmax world wide web desktop 06 51 b
• hitachi groupmax world wide web desktop 06 51 c
• hitachi groupmax world wide web desktop 06 52
• hitachi groupmax world wide web desktop 06 52 b
References
- http://secunia.com/advisories/13321 Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html Patch
- http://www.osvdb.org/12154 Patch
- http://www.securityfocus.com/bid/11773 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18277 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/13321 Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html Patch
- http://www.osvdb.org/12154 Patch
- http://www.securityfocus.com/bid/11773 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18277 exchange.xforce.ibmcloud.com