VulnerabilityModified
CVE-2007-0514
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
MEDIUM 6.8EPSS 1.24%
Does this matter?
Lower severity and a low EPSS score (1.24%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.24% probability · 68th percentile
- CISA KEV
- Not listed
- Affected
- hitachi/cosminexus application server · hitachi/cosminexus application server version 5 · hitachi/cosminexus developer light version 6 · hitachi/cosminexus developer professional version 6 · hitachi/cosminexus developer standard version 6 · hitachi/cosminexus developer version 5 · hitachi/cosminexus server - enterprise edition · hitachi/cosminexus server - standard edition · hitachi/cosminexus server - standard edition version 4 · hitachi/cosminexus server - web edition · hitachi/cosminexus server - web edition version 4 · hitachi/hitachi web server · hitachi/ucosminexus application server enterprise · hitachi/ucosminexus application server smart edition · hitachi/ucosminexus application server standard · hitachi/ucosminexus developer light · hitachi/ucosminexus developer standard · hitachi/ucosminexus service architect · hitachi/ucosminexus service platform
- Source
- cve@mitre.org
References
- http://osvdb.org/32997
- http://osvdb.org/32998
- http://secunia.com/advisories/23843
- http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0326
- http://osvdb.org/32997
- http://osvdb.org/32998
- http://secunia.com/advisories/23843
- http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0326
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.