69 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-4188
Hitachi Tuning Manager (and JP1/Performance Management - Manager Web Option 07-00 to 07-54) is affected by a CSRF vulnerability that can allow remote attackers to hijack the authentication of unspecified victims. Vectors are not detailed in the provided documents. Affected versions are Hitachi Tu...
CVE-2014-4189
Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option contain a cross-site scripting (XSS) vulnerability (CVE-2014-4189). The flaw affects Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04, and JP1/Performance Management - Manager Web Option 07-00 through 07-54. ...
CVE-2014-4189
Cross-site scripting XSS vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-4188
Cross-site request forgery CSRF vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Multiple Vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option
Overview Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option contains cross-site scripting and cross-site request forgery CSRF vulnerabilities. These vulnerabilities can not be exploited, unless logging in these products. Impact A remote attackers could insert to malicious...
Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management
Overview Hitachi Tuning Manager, JP1/Performance Management - Web Console, and JP1/Performance Management - Manager Web Option contain Cross-site scripting and cross-site request forgery CSRF vulnerabilities. These vulnerabilities can not be exploited, unless logging in these products. Impact A...
Design/Logic Flaw
Unspecified vulnerability in Hitachi JP1/HiCommand DeviceManager, Global Link Availability Manager, Replication Monitor, Tiered Storage Manager, and Tuning Manager allows local users to obtain authentication information via unspecified vectors...