Unscored severity · published Jan 26, 2007
CVE-2007-0514
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cosminexus Application Server · Hitachi
6 · source: NVD
CA
Cosminexus Application Server Version 5 · Hitachi
All versions, or not specified · source: NVD
CD
Cosminexus Developer Light Version 6 · Hitachi
All versions, or not specified · source: NVD
CD
Cosminexus Developer Professional Version 6 · Hitachi
All versions, or not specified · source: NVD
CD
Cosminexus Developer Standard Version 6 · Hitachi
All versions, or not specified · source: NVD
CD
Cosminexus Developer Version 5 · Hitachi
All versions, or not specified · source: NVD
CS
Cosminexus Server - Enterprise Edition · Hitachi
All versions, or not specified · source: NVD
CS
Cosminexus Server - Standard Edition · Hitachi
All versions, or not specified · source: NVD
CS
Cosminexus Server - Standard Edition Version 4 · Hitachi
All versions, or not specified · source: NVD
CS
Cosminexus Server - Web Edition · Hitachi
All versions, or not specified · source: NVD
CS
Cosminexus Server - Web Edition Version 4 · Hitachi
All versions, or not specified · source: NVD
HW
Hitachi Web Server · Hitachi
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0514
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0514
osvdb.org
http://osvdb.org/32997
osvdb.org
http://osvdb.org/32998
secunia.com
http://secunia.com/advisories/23843
Patch
http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
www.vupen.com
http://www.vupen.com/english/advisories/2007/0326
More from Cosminexus Application Server
–
CVE-2009-4776
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow,…
–
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the…
–
CVE-2007-3794
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this…
–
CVE-2007-3626
Unspecified vulnerability in the ADM daemon in Hitachi TPBroker before 20070706 allows remote attackers to cause a denial of service (daemon crash) via a certain request
–
CVE-2005-3164
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a…