Unscored severity · published Dec 31, 2004
CVE-2004-2492
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GW
Groupmax World Wide Web Desktop · Hitachi
05_00; 05_11_f; 05_11_i; 05_11_j; 06_00; 06_50_b; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2492
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2492
Vendor Advisory
http://secunia.com/advisories/13321
Patch
http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html
Patch
http://www.osvdb.org/12154
www.securityfocus.com
http://www.securityfocus.com/bid/11773
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18277
More from Groupmax World Wide Web Desktop
–
CVE-2006-2087
The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or erroneous behavior) via an attachment with an…
–
CVE-2006-1574
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to…
–
CVE-2004-2493
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary…