medium6.8
CVE-2007-0514
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Cosminexus Application Server | All versions Version 6 |
| Hitachi | Cosminexus Application Server Version 5 | All versions |
| Hitachi | Cosminexus Developer Light Version 6 | All versions |
| Hitachi | Cosminexus Developer Professional Version 6 | All versions |
| Hitachi | Cosminexus Developer Standard Version 6 | All versions |
| Hitachi | Cosminexus Developer Version 5 | All versions |
| Hitachi | Cosminexus Server - Enterprise Edition | All versions |
| Hitachi | Cosminexus Server - Standard Edition | All versions |
| Hitachi | Cosminexus Server - Standard Edition Version 4 | All versions |
| Hitachi | Cosminexus Server - Web Edition | All versions |
| Hitachi | Cosminexus Server - Web Edition Version 4 | All versions |
| Hitachi | Hitachi Web Server | All versions |
References
- NVD record
- CVE.org record
- http://osvdb.org/32997
- http://osvdb.org/32998
- http://secunia.com/advisories/23843
- http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
- http://www.vupen.com/english/advisories/2007/0326
- http://osvdb.org/32997
- http://osvdb.org/32998
- http://secunia.com/advisories/23843
- http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
- http://www.vupen.com/english/advisories/2007/0326