CVE-2007-4124

Cosminexus Component Container (Hitachi products) is affected for Cosminexus 6, 6.7, and 7 prior to 20070731. The session failover function may mishandle session data so one user’s session data could be used for another user, enabling remote authenticated access to sensitive information, possible...

CVE-2005-4322

The CVE-2005-4322 entry describes multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A. The issue allows remote atta...

CVE-2007-3043

CVE-2007-3043 is an XSS vulnerability affecting multiple Hitachi Groupmax/ uCosminexus collaboration products on Windows (e.g., Groupmax Collaboration Portal, Collaboration Web Client, Portal/File Sharing components) with versions up to the listed build identifiers. The flaw permits remote attack...

CVE-2005-4323

CVE-2005-4323 describes an unspecified vulnerability in Hitachi Cosminexus Collaboration Portal (versions 06-00 through 06-10-/B), Groupmax Collaboration Portal (07-00 through 07-10-/B), and Groupmax Collaboration Web Client (07-00 through 07-10-/A) that allows remote attackers to cause a denial ...

CVE-2007-1786

CVE-2007-1786 is a SQL injection vulnerability in Hitachi Collaboration products (01-00 through 01-30), used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager. The underlying issu...

CVE-2007-4204

Hitachi Groupmax Collaboration components (Schedule) across Groupmax Collaboration Portal 07-32, uCosminexus Collaboration Portal 06-32, and Groupmax Collaboration Web Client - Mail/Schedule 07-32 are affected. The issue described is that schedule data can be assigned to the wrong user under unsp...

CVE-2007-5808

The CVE-2007-5808 entry concerns an information-disclosure vulnerability in the Schedule component of Hitachi Groupmax Collaboration Portal (and related uCosminexus/Groupmax Web Client components). The non-disclosable information could be exposed via schedule portlets, allowing remote attackers t...

CVE-2006-3574

CVE-2006-3574 involves XSS vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client (affected before 07-20-/D) and uCosminexus Collaboration Portal and Forum/File Sharing (affected before 06-20-/C). The issue allows remote execution of malicious scripts via unknown vectors. The pro...