Unscored severity · published Mar 31, 2007
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web…
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Cosminexus Collaboration Portal · Hitachi
All versions, or not specified · source: NVD
GC
Groupmax Collaboration Portal · Hitachi
All versions, or not specified · source: NVD
GC
Groupmax Collaboration Web Client · Hitachi
All versions, or not specified · source: NVD
UC
Ucosminexus Collaboration Portal · Hitachi
All versions, or not specified · source: NVD
UC
Ucosminexus Content Manager · Hitachi
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1786
osvdb.org
http://osvdb.org/34544
Vendor Advisory
http://secunia.com/advisories/24693
Vendor Advisory
http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html
www.securityfocus.com
http://www.securityfocus.com/bid/23208
www.vupen.com
http://www.vupen.com/english/advisories/2007/1168
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33348
More from Cosminexus Collaboration Portal
–
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the…
–
CVE-2006-3574
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File…
–
CVE-2005-4322
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and…
–
CVE-2005-4323
Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web…