CVE-2007-4760

2007-09-0810:17:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2007-4760

cosminexus

developer's kit

java

xss

html

injection

5.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.8%

JSON

The javadoc tool in Cosminexus Developer’s Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as CVE-2007-3503.

CPENameOperatorVersion
hitachi:ucosminexus_service_platformhitachi ucosminexus service platformeq07_00_03
hitachi:ucosminexus_developer_standardhitachi ucosminexus developer standardeq07_20_01
hitachi:ucosminexus_application_server_standardhitachi ucosminexus application server standardeq07_00_01
hitachi:ucosminexus_application_server_enterprisehitachi ucosminexus application server enterpriseeq7_20_01
hitachi:ucosminexus_application_server_enterprisehitachi ucosminexus application server enterpriseeq07_10_01
hitachi:ucosminexus_service_platformhitachi ucosminexus service platformeq07_00
hitachi:ucosminexus_developer_standardhitachi ucosminexus developer standardeq07_10_01
hitachi:ucosminexus_application_server_enterprisehitachi ucosminexus application server enterpriseeq7_20
hitachi:ucosminexus_application_server_standardhitachi ucosminexus application server standardeq07_00
hitachi:ucosminexus_application_server_standardhitachi ucosminexus application server standardeq7_10_01

CPE	Name	Operator	Version
hitachi:ucosminexus_service_platform	hitachi ucosminexus service platform	eq	07_00_03
hitachi:ucosminexus_developer_standard	hitachi ucosminexus developer standard	eq	07_20_01
hitachi:ucosminexus_application_server_standard	hitachi ucosminexus application server standard	eq	07_00_01
hitachi:ucosminexus_application_server_enterprise	hitachi ucosminexus application server enterprise	eq	7_20_01
hitachi:ucosminexus_application_server_enterprise	hitachi ucosminexus application server enterprise	eq	07_10_01
hitachi:ucosminexus_service_platform	hitachi ucosminexus service platform	eq	07_00
hitachi:ucosminexus_developer_standard	hitachi ucosminexus developer standard	eq	07_10_01
hitachi:ucosminexus_application_server_enterprise	hitachi ucosminexus application server enterprise	eq	7_20
hitachi:ucosminexus_application_server_standard	hitachi ucosminexus application server standard	eq	07_00
hitachi:ucosminexus_application_server_standard	hitachi ucosminexus application server standard	eq	7_10_01