Unscored severity · published Jun 5, 2007
CVE-2007-3043
Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D,…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GC
Groupmax Collaboration Portal · Hitachi
7_20_e; 7_30_d · source: NVD
GC
Groupmax Collaboration Web Client · Hitachi
forum_file_share_7_20_d; forum_file_share_7_30_c · source: NVD
UC
Ucosminexus Collaboration Portal · Hitachi
6_20_e; 6_30_d; forum_file_share_6_20_d; forum_file_share_6_30_c · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3043
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3043
osvdb.org
http://osvdb.org/36828
Vendor Advisory
http://secunia.com/advisories/25507
www.hitachi-support.com
http://www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html
www.securityfocus.com
http://www.securityfocus.com/bid/24263
www.vupen.com
http://www.vupen.com/english/advisories/2007/2020
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34659
More from Groupmax Collaboration Portal
–
CVE-2007-5808
Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C,…
–
CVE-2007-4204
Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus Collaboration Portal 06-32 through 06-32-/B, and Groupmax…
–
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the…
–
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web…
–
CVE-2006-3574
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File…