Unscored severity · published Nov 5, 2007
CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cosminexus Application Server Enterprise · Hitachi
through 06_51_j · source: NVD
CA
Cosminexus Application Server Standard · Hitachi
through 06_51_j · source: NVD
CD
Cosminexus Developer Light Version 6 · Hitachi
through 06_51_j · source: NVD
CD
Cosminexus Developer Professional Version 6 · Hitachi
through 06_51_j · source: NVD
CD
Cosminexus Developer Standard Version 6 · Hitachi
through 06_51_j · source: NVD
CS
Cosminexus Server · Hitachi
through 04_01 · source: NVD
UA
Ucosminexus Application Server Enterprise · Hitachi
through 07_50_01 · source: NVD
UA
Ucosminexus Application Server Standard · Hitachi
through 07_50_01 · source: NVD
UD
Ucosminexus Developer Light · Hitachi
through 06_71_d · source: NVD
UD
Ucosminexus Developer Professional · Hitachi
through 07_50_01 · source: NVD
UD
Ucosminexus Developer Standard · Hitachi
through 07_50_01 · source: NVD
US
Ucosminexus Service Architect · Hitachi
through 07_50_01 · source: NVD
Affected product
CA
Cosminexus Application Server Enterprise
Hitachi
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5809
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5809
osvdb.org
http://osvdb.org/42027
Vendor Advisory
http://secunia.com/advisories/27421
www.hitachi-support.com
http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html
www.securityfocus.com
http://www.securityfocus.com/bid/26271
www.vupen.com
http://www.vupen.com/english/advisories/2007/3666
More from Cosminexus Application Server Enterprise
–
CVE-2007-5810
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof…
–
CVE-2007-4563
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to…
–
CVE-2007-4564
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to…