4.3

CVE-2004-2497

Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachi ≫ Web Page Generator Version01_00
Hitachi ≫ Web Page Generator Version01_01_c
Hitachi ≫ Web Page Generator Version02_00
Hitachi ≫ Web Page Generator Version02_00_c
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.18% 0.635
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/12150
Vendor Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html
Vendor Advisory
http://www.osvdb.org/8264
http://www.securityfocus.com/bid/10818
https://exchange.xforce.ibmcloud.com/vulnerabilities/16822