Lucene search

K
cve[email protected]CVE-2007-5809
HistoryNov 05, 2007 - 5:46 p.m.

CVE-2007-5809

2007-11-0517:46:00
CWE-79
web.nvd.nist.gov
12
cve-2007-5809
cross-site scripting
xss vulnerability
hitachi web server
remote attackers
web script injection
html injection

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.3%

Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

Affected configurations

NVD
Node
hitachicosminexus_application_server_enterpriseRange06_51_j
OR
hitachicosminexus_application_server_standardRange06_51_j
OR
hitachicosminexus_developer_light_version_6Range06_51_j
OR
hitachicosminexus_developer_professional_version_6Range06_51_j
OR
hitachicosminexus_developer_standard_version_6Range06_51_j
OR
hitachicosminexus_serverRange04_01
OR
hitachiucosminexus_application_server_enterpriseRange07_50_01
OR
hitachiucosminexus_application_server_standardRange07_50_01
OR
hitachiucosminexus_developer_lightRange06_71_d
OR
hitachiucosminexus_developer_professionalRange07_50_01
OR
hitachiucosminexus_developer_standardRange07_50_01
OR
hitachiucosminexus_service_architectRange07_50_01
OR
hitachiucosminexus_service_platformRange07_50_01
OR
hitachiweb_serverMatch01_00hpux
OR
hitachiweb_serverMatch01_00solaris
OR
hitachiweb_serverMatch01_01aix
OR
hitachiweb_serverMatch01_01linux
OR
hitachiweb_serverMatch01_01turbolinux
OR
hitachiweb_serverMatch01_01_dlinux
OR
hitachiweb_serverMatch01_02_dhpux
OR
hitachiweb_serverMatch01_02_dsolaris
OR
hitachiweb_serverMatch01_02_eaix
OR
hitachiweb_serverMatch02_00aix
OR
hitachiweb_serverMatch02_00hpux
OR
hitachiweb_serverMatch02_00linux
OR
hitachiweb_serverMatch02_00solaris
OR
hitachiweb_serverMatch02_00turbolinux
OR
hitachiweb_serverMatch02_00windows
OR
hitachiweb_serverMatch02_00_alinux
OR
hitachiweb_serverMatch02_02hpux
OR
hitachiweb_serverMatch02_02hpux\(ipf\)
OR
hitachiweb_serverMatch02_02linux
OR
hitachiweb_serverMatch02_04_baix
OR
hitachiweb_serverMatch02_04_bhpux
OR
hitachiweb_serverMatch02_04_bhpux\(ipf\)
OR
hitachiweb_serverMatch02_04_bsolaris
OR
hitachiweb_serverMatch02_04_bwindows
OR
hitachiweb_serverMatch02_06_alinux
OR
hitachiweb_serverMatch03_00aix
OR
hitachiweb_serverMatch03_00hpux\(ipf\)
OR
hitachiweb_serverMatch03_00linux
OR
hitachiweb_serverMatch03_00windows
OR
hitachiweb_serverMatch03_00_01solaris
OR
hitachiweb_serverMatch03_00_01windows

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.3%

Related for CVE-2007-5809