4.3
CVE-2007-5809
- EPSS 1.07%
- Veröffentlicht 05.11.2007 17:46:00
- Zuletzt bearbeitet 16.06.2026 22:46:52
- Erkennungen
LoginCross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachi ≫ Cosminexus Application Server Enterprise Version <= 06_51_j
Hitachi ≫ Cosminexus Application Server Standard Version <= 06_51_j
Hitachi ≫ Cosminexus Developer Light Version 6 Version <= 06_51_j
Hitachi ≫ Cosminexus Developer Professional Version 6 Version <= 06_51_j
Hitachi ≫ Cosminexus Developer Standard Version 6 Version <= 06_51_j
Hitachi ≫ Cosminexus Server Version <= 04_01
Hitachi ≫ Ucosminexus Application Server Enterprise Version <= 07_50_01
Hitachi ≫ Ucosminexus Application Server Standard Version <= 07_50_01
Hitachi ≫ Ucosminexus Developer Light Version <= 06_71_d
Hitachi ≫ Ucosminexus Developer Professional Version <= 07_50_01
Hitachi ≫ Ucosminexus Developer Standard Version <= 07_50_01
Hitachi ≫ Ucosminexus Service Architect Version <= 07_50_01
Hitachi ≫ Ucosminexus Service Platform Version <= 07_50_01
Hitachi ≫ Web Server Version 01_00 Edition hpux
Hitachi ≫ Web Server Version 01_00 Edition solaris
Hitachi ≫ Web Server Version 01_01 Edition aix
Hitachi ≫ Web Server Version 01_01 Edition linux
Hitachi ≫ Web Server Version 01_01 Edition turbolinux
Hitachi ≫ Web Server Version 01_01_d Edition linux
Hitachi ≫ Web Server Version 01_02_d Edition hpux
Hitachi ≫ Web Server Version 01_02_d Edition solaris
Hitachi ≫ Web Server Version 01_02_e Edition aix
Hitachi ≫ Web Server Version 02_00 Edition aix
Hitachi ≫ Web Server Version 02_00 Edition hpux
Hitachi ≫ Web Server Version 02_00 Edition linux
Hitachi ≫ Web Server Version 02_00 Edition solaris
Hitachi ≫ Web Server Version 02_00 Edition turbolinux
Hitachi ≫ Web Server Version 02_00 Edition windows
Hitachi ≫ Web Server Version 02_00_a Edition linux
Hitachi ≫ Web Server Version 02_02 Edition hpux
Hitachi ≫ Web Server Version 02_02 Edition linux
Hitachi ≫ Web Server Version 02_04_b Edition aix
Hitachi ≫ Web Server Version 02_04_b Edition hpux
Hitachi ≫ Web Server Version 02_04_b Edition solaris
Hitachi ≫ Web Server Version 02_04_b Edition windows
Hitachi ≫ Web Server Version 02_06_a Edition linux
Hitachi ≫ Web Server Version 03_00 Edition aix
Hitachi ≫ Web Server Version 03_00 Edition linux
Hitachi ≫ Web Server Version 03_00 Edition windows
Hitachi ≫ Web Server Version 03_00_01 Edition solaris
Hitachi ≫ Web Server Version 03_00_01 Edition windows
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.07% | 0.603 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
http://osvdb.org/42027
http://secunia.com/advisories/27421
http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html
http://www.securityfocus.com/bid/26271
http://www.vupen.com/english/advisories/2007/3666