medium4.3
CVE-2007-3043
Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal…
Impact
Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachi | Groupmax Collaboration Portal | Versions 7_20_e, 7_30_d |
| Hitachi | Groupmax Collaboration Web Client | Versions forum_file_share_7_20_d, forum_file_share_7_30_c |
| Hitachi | Ucosminexus Collaboration Portal | Versions 6_20_e, 6_30_d, forum_file_share_6_20_d, forum_file_share_6_30_c |
References
- NVD record
- CVE.org record
- http://osvdb.org/36828
- http://secunia.com/advisories/25507
- http://www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html
- http://www.securityfocus.com/bid/24263
- http://www.vupen.com/english/advisories/2007/2020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34659
- http://osvdb.org/36828
- http://secunia.com/advisories/25507
- http://www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html
- http://www.securityfocus.com/bid/24263
- http://www.vupen.com/english/advisories/2007/2020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34659