Unscored severity · published Apr 1, 2006
CVE-2006-1574
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GW
Groupmax World Wide Web · Hitachi
2; 3 · source: NVD
GW
Groupmax World Wide Web Desktop · Hitachi
5; 6 · source: NVD
GW
Groupmax World Wide Web Desktop Scheduler · Hitachi
5 · source: NVD
GW
Groupmax World Wide Web Scheduler · Hitachi
2; 3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1574
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1574
Vendor Advisory
http://secunia.com/advisories/19483
Patch
http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html
www.osvdb.org
http://www.osvdb.org/24295
www.securityfocus.com
http://www.securityfocus.com/bid/17337
www.vupen.com
http://www.vupen.com/english/advisories/2006/1180
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25574
More from Groupmax World Wide Web
–
CVE-2006-2087
The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (application hang or erroneous behavior) via an attachment with an…
–
CVE-2004-2493
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary…