4.3

CVE-2007-3623

Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachi ≫ Jp1-hicommand Device Manager Version 02_30 Edition solaris
Hitachi ≫ Jp1-hicommand Device Manager Version 02_30 Edition windows
Hitachi ≫ Jp1-hicommand Device Manager Version 05_00 Edition solaris
Hitachi ≫ Jp1-hicommand Device Manager Version 05_00 Edition windows
Hitachi ≫ Jp1-hicommand Device Manager Version 05_10 Edition linux
Hitachi ≫ Jp1-hicommand Device Manager Version 05_50 Edition linux
Hitachi ≫ Jp1-hicommand Device Manager Version 05_50 Edition solaris
Hitachi ≫ Jp1-hicommand Device Manager Version 05_50 Edition windows
Hitachi ≫ Jp1-hicommand Global Link Availability Manager Version 05_00 Edition windows
Hitachi ≫ Jp1-hicommand Replication Monitor Version 04_00 Edition solaris
Hitachi ≫ Jp1-hicommand Replication Monitor Version 04_00 Edition windows
Hitachi ≫ Jp1-hicommand Replication Monitor Version 05_00 Edition solaris
Hitachi ≫ Jp1-hicommand Replication Monitor Version 05_00 Edition windows
Hitachi ≫ Jp1-hicommand Replication Monitor Version 05_50 Edition solaris
Hitachi ≫ Jp1-hicommand Replication Monitor Version 05_50 Edition windows
Hitachi ≫ Jp1-hicommand Tiered Storage Manager Version 04_00 Edition windows
Hitachi ≫ Jp1-hicommand Tiered Storage Manager Version 04_30 Edition solaris
Hitachi ≫ Jp1-hicommand Tiered Storage Manager Version 05_00 Edition solaris
Hitachi ≫ Jp1-hicommand Tiered Storage Manager Version 05_00 Edition windows
Hitachi ≫ Jp1-hicommand Tiered Storage Manager Version 05_50 Edition solaris
Hitachi ≫ Jp1-hicommand Tiered Storage Manager Version 05_50 Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.92% 0.772
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/25973
http://www.vupen.com/english/advisories/2007/2457
http://osvdb.org/37848
http://osvdb.org/37849
http://www.hitachi-support.com/security_e/vuls_e/HS07-017_e/index-e.html
Patch
http://www.securityfocus.com/bid/24797
https://exchange.xforce.ibmcloud.com/vulnerabilities/35286