Unscored severity · published Apr 3, 2007
CVE-2007-1854
Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Cosminexus Component Container · Hitachi
07_00_11; 07_00_11; 07_00_11; 07_00_11; 07_10_04; 07_10_04; +4 more · source: NVD
EF
Electronic Form Workflow · Hitachi
All versions, or not specified · source: NVD
UA
Ucosminexus Application Server · Hitachi
All versions, or not specified · source: NVD
UD
Ucosminexus Developer · Hitachi
All versions, or not specified · source: NVD
UE
Ucosminexus Erp Integrator · Hitachi
All versions, or not specified · source: NVD
US
Ucosminexus Service Architect · Hitachi
All versions, or not specified · source: NVD
US
Ucosminexus Service Platform · Hitachi
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1854
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1854
osvdb.org
http://osvdb.org/34768
Vendor Advisory
http://secunia.com/advisories/24683
www.hitachi-support.com
http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html
www.securityfocus.com
http://www.securityfocus.com/bid/23213
www.vupen.com
http://www.vupen.com/english/advisories/2007/1170
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33318
More from Cosminexus Component Container
9.8
CVE-2026-71377
Command Argument Injection Vulnerability in Cosminexus Component Container
9.8
CVE-2026-71376
OS Command Injection Vulnerability in Cosminexus Component Container
9.8
CVE-2026-71374
Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container
7.4
CVE-2026-71375
XXE Vulnerability in Cosminexus Component Container