Ucosminexus Application Server Enterprise Security Vulnerabilities and Issues — Ucosminexus Application Server Enterprise CVE List

Lucene search

HitachiUcosminexus Application Server Enterprise

4 matches found

CVE•added 2007/09/08 10:17 a.m.•50 views

CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

4.3CVSS5.5AI score0.01071EPSS

CVE•added 2007/08/28 1:17 a.m.•43 views

CVE-2007-4564

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.

4.6CVSS6.5AI score0.00052EPSS

CVE•added 2007/08/28 1:17 a.m.•40 views

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.

4.4CVSS6.5AI score0.00052EPSS

CVE•added 2007/11/05 5:46 p.m.•31 views

CVE-2007-5809

Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.

4.3CVSS5.7AI score0.00329EPSS