4.3
CVE-2004-2497
- EPSS 0.46%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachi ≫ Web Page Generator Version01_00
Hitachi ≫ Web Page Generator Version01_01_c
Hitachi ≫ Web Page Generator Version02_00
Hitachi ≫ Web Page Generator Version02_00_c
Hitachi ≫ Web Page Generator Enterprise Version03_00
Hitachi ≫ Web Page Generator Enterprise Version03_02_c
Hitachi ≫ Web Page Generator Enterprise Version03_03
Hitachi ≫ Web Page Generator Enterprise Version03_03_c
Hitachi ≫ Web Page Generator Enterprise Version03_03_d
Hitachi ≫ Web Page Generator Enterprise Version04_00
Hitachi ≫ Web Page Generator Enterprise Version04_00_c
Hitachi ≫ Web Page Generator Enterprise Version04_01
Hitachi ≫ Web Page Generator Enterprise Version04_01_b
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.46% | 0.614 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|