Lucene search

[email protected]CVE-2004-2497

HistoryOct 25, 2005 - 4:00 a.m.

CVE-2004-2497

2005-10-2504:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2497

cross-site scripting

xss

hitachi

web page generator

security

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

JSON

Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected configurations

NVD

Node

hitachiweb_page_generatorMatch01_00

hitachiweb_page_generatorMatch01_01_c

hitachiweb_page_generatorMatch02_00

hitachiweb_page_generatorMatch02_00_c

hitachiweb_page_generator_enterpriseMatch03_00

hitachiweb_page_generator_enterpriseMatch03_02_c

hitachiweb_page_generator_enterpriseMatch03_03

hitachiweb_page_generator_enterpriseMatch03_03_c

hitachiweb_page_generator_enterpriseMatch03_03_d

hitachiweb_page_generator_enterpriseMatch04_00

hitachiweb_page_generator_enterpriseMatch04_00_c

hitachiweb_page_generator_enterpriseMatch04_01

hitachiweb_page_generator_enterpriseMatch04_01_b

CPENameOperatorVersion
hitachi:web_page_generatorhitachi web page generatoreq01_00
hitachi:web_page_generatorhitachi web page generatoreq01_01_c
hitachi:web_page_generatorhitachi web page generatoreq02_00
hitachi:web_page_generatorhitachi web page generatoreq02_00_c
hitachi:web_page_generator_enterprisehitachi web page generator enterpriseeq03_00
hitachi:web_page_generator_enterprisehitachi web page generator enterpriseeq03_02_c
hitachi:web_page_generator_enterprisehitachi web page generator enterpriseeq03_03
hitachi:web_page_generator_enterprisehitachi web page generator enterpriseeq03_03_c
hitachi:web_page_generator_enterprisehitachi web page generator enterpriseeq03_03_d
hitachi:web_page_generator_enterprisehitachi web page generator enterpriseeq04_00

CPE	Name	Operator	Version
hitachi:web_page_generator	hitachi web page generator	eq	01_00
hitachi:web_page_generator	hitachi web page generator	eq	01_01_c
hitachi:web_page_generator	hitachi web page generator	eq	02_00
hitachi:web_page_generator	hitachi web page generator	eq	02_00_c
hitachi:web_page_generator_enterprise	hitachi web page generator enterprise	eq	03_00
hitachi:web_page_generator_enterprise	hitachi web page generator enterprise	eq	03_02_c
hitachi:web_page_generator_enterprise	hitachi web page generator enterprise	eq	03_03
hitachi:web_page_generator_enterprise	hitachi web page generator enterprise	eq	03_03_c
hitachi:web_page_generator_enterprise	hitachi web page generator enterprise	eq	03_03_d
hitachi:web_page_generator_enterprise	hitachi web page generator enterprise	eq	04_00

Rows per page:

1-10 of 131

References

secunia.com/advisories/12150

www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html

www.osvdb.org/8264

www.securityfocus.com/bid/10818

exchange.xforce.ibmcloud.com/vulnerabilities/16822

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

JSON

Related for CVE-2004-2497

nvd1 cvelist1