Lucene search

[email protected]CVE-2007-3043

HistoryJun 05, 2007 - 11:30 p.m.

CVE-2007-3043

2007-06-0523:30:00

[email protected]

web.nvd.nist.gov

cve-2007-3043

cross-site scripting

xss

hitachi groupmax collaboration portal

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

hitachigroupmax_collaboration_portalMatch7_20_e

hitachigroupmax_collaboration_portalMatch7_30_d

hitachigroupmax_collaboration_web_clientMatchforum_file_share_7_20_d

hitachigroupmax_collaboration_web_clientMatchforum_file_share_7_30_c

hitachiucosminexus_collaboration_portalMatch6_20_e

hitachiucosminexus_collaboration_portalMatch6_30_d

hitachiucosminexus_collaboration_portalMatchforum_file_share_6_20_d

hitachiucosminexus_collaboration_portalMatchforum_file_share_6_30_c

CPENameOperatorVersion
hitachi:groupmax_collaboration_portalhitachi groupmax collaboration portaleq7_20_e
hitachi:groupmax_collaboration_portalhitachi groupmax collaboration portaleq7_30_d
hitachi:groupmax_collaboration_web_clienthitachi groupmax collaboration web clienteqforum_file_share_7_20_d
hitachi:groupmax_collaboration_web_clienthitachi groupmax collaboration web clienteqforum_file_share_7_30_c
hitachi:ucosminexus_collaboration_portalhitachi ucosminexus collaboration portaleq6_20_e
hitachi:ucosminexus_collaboration_portalhitachi ucosminexus collaboration portaleq6_30_d
hitachi:ucosminexus_collaboration_portalhitachi ucosminexus collaboration portaleqforum_file_share_6_20_d
hitachi:ucosminexus_collaboration_portalhitachi ucosminexus collaboration portaleqforum_file_share_6_30_c

CPE	Name	Operator	Version
hitachi:groupmax_collaboration_portal	hitachi groupmax collaboration portal	eq	7_20_e
hitachi:groupmax_collaboration_portal	hitachi groupmax collaboration portal	eq	7_30_d
hitachi:groupmax_collaboration_web_client	hitachi groupmax collaboration web client	eq	forum_file_share_7_20_d
hitachi:groupmax_collaboration_web_client	hitachi groupmax collaboration web client	eq	forum_file_share_7_30_c
hitachi:ucosminexus_collaboration_portal	hitachi ucosminexus collaboration portal	eq	6_20_e
hitachi:ucosminexus_collaboration_portal	hitachi ucosminexus collaboration portal	eq	6_30_d
hitachi:ucosminexus_collaboration_portal	hitachi ucosminexus collaboration portal	eq	forum_file_share_6_20_d
hitachi:ucosminexus_collaboration_portal	hitachi ucosminexus collaboration portal	eq	forum_file_share_6_30_c

References

osvdb.org/36828

secunia.com/advisories/25507

www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html

www.securityfocus.com/bid/24263

www.vupen.com/english/advisories/2007/2020

exchange.xforce.ibmcloud.com/vulnerabilities/34659

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

Related for CVE-2007-3043

cvelist1 nvd1 prion1