CVEvulnerability

CVE-2007-3623

4.3 MEDIUM Published 2007-07-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

Affected configurations

• hitachi jp1-hicommand device manager 02 30 • hitachi jp1-hicommand device manager 05 00 • hitachi jp1-hicommand device manager 05 10 • hitachi jp1-hicommand device manager 05 50 • hitachi jp1-hicommand global link availability manager 05 00 • hitachi jp1-hicommand replication monitor 04 00 • hitachi jp1-hicommand replication monitor 05 00 • hitachi jp1-hicommand replication monitor 05 50 • hitachi jp1-hicommand tiered storage manager 04 00 • hitachi jp1-hicommand tiered storage manager 04 30 • hitachi jp1-hicommand tiered storage manager 05 00 • hitachi jp1-hicommand tiered storage manager 05 50

References