Unscored severity · published Jul 13, 2006
CVE-2006-3574
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to "execute malicious scripts" via unknown vectors (aka HS06-014-01).
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Cosminexus Collaboration Portal · Hitachi
through 06_10_b; 6.2; 06_00 · source: NVD
GC
Groupmax Collaboration Portal · Hitachi
through 07_10_b; 7.2; 07_00 · source: NVD
GC
Groupmax Collaboration Web Client · Hitachi
through 07_10_a; 7.2; 07_00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3574
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3574
Patch
http://secunia.com/advisories/20926
Patch
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html
Patch
http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html
Patch
http://www.securityfocus.com/bid/18830
www.vupen.com
http://www.vupen.com/english/advisories/2006/2665
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27605
More from Cosminexus Collaboration Portal
–
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the…
–
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web…
–
CVE-2005-4322
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and…
–
CVE-2005-4323
Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web…