CVEvulnerability

CVE-2007-5809

4.3 MEDIUM Published 2007-11-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-11-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

Affected configurations

• hitachi cosminexus application server enterprise (<= 06 51 j) • hitachi cosminexus application server standard (<= 06 51 j) • hitachi cosminexus developer light version 6 (<= 06 51 j) • hitachi cosminexus developer professional version 6 (<= 06 51 j) • hitachi cosminexus developer standard version 6 (<= 06 51 j) • hitachi cosminexus server (<= 04 01) • hitachi ucosminexus application server enterprise (<= 07 50 01) • hitachi ucosminexus application server standard (<= 07 50 01) • hitachi ucosminexus developer light (<= 06 71 d) • hitachi ucosminexus developer professional (<= 07 50 01) • hitachi ucosminexus developer standard (<= 07 50 01) • hitachi ucosminexus service architect (<= 07 50 01) • hitachi ucosminexus service platform (<= 07 50 01) • hitachi web server 01 00 • hitachi web server 01 01 • hitachi web server 01 01 d • hitachi web server 01 02 d • hitachi web server 01 02 e • hitachi web server 02 00 • hitachi web server 02 00 a • hitachi web server 02 02 • hitachi web server 02 04 b • hitachi web server 02 06 a • hitachi web server 03 00 • hitachi web server 03 00 01

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References