Unscored severity · published Oct 9, 2007
CVE-2007-5281
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UA
Ucosminexus Application Server Enterprise · Hitachi
07_50 · source: NVD
UA
Ucosminexus Application Server Standard · Hitachi
7_50 · source: NVD
UC
Ucosminexus Client · Hitachi
07_50 · source: NVD
UD
Ucosminexus Developer Professional · Hitachi
07_50 · source: NVD
UD
Ucosminexus Developer Standard · Hitachi
07_50 · source: NVD
UO
Ucosminexus Operator · Hitachi
07_50 · source: NVD
US
Ucosminexus Service Architect · Hitachi
7_50 · source: NVD
US
Ucosminexus Service Platform · Hitachi
7_50 · source: NVD
Affected product
UA
Ucosminexus Application Server Enterprise
Hitachi
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5281
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5281
Vendor Advisory
http://secunia.com/advisories/27075
www.hitachi-support.com
http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html
www.securityfocus.com
http://www.securityfocus.com/bid/25935
www.vupen.com
http://www.vupen.com/english/advisories/2007/3375
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/36965
More from Ucosminexus Application Server Enterprise
–
CVE-2007-5810
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof…
–
CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script…
–
CVE-2007-4759
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of…
–
CVE-2007-4758
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or…
–
CVE-2007-4760
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows…