CVE-2007-0514

Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-01-26

Last modified

2024-08-07

Affected products

• Cosminexus Application Server (Hitachi)
• Cosminexus Application Server Version 5 (Hitachi)
• Cosminexus Developer Light Version 6 (Hitachi)
• Cosminexus Developer Professional Version 6 (Hitachi)
• Cosminexus Developer Standard Version 6 (Hitachi)
• Cosminexus Developer Version 5 (Hitachi)
• Cosminexus Server - Enterprise Edition (Hitachi)
• Cosminexus Server - Standard Edition (Hitachi)
• Cosminexus Server - Standard Edition Version 4 (Hitachi)
• Cosminexus Server - Web Edition (Hitachi)
• Cosminexus Server - Web Edition Version 4 (Hitachi)
• Hitachi Web Server (Hitachi)
• Ucosminexus Application Server Enterprise (Hitachi)
• Ucosminexus Application Server Smart Edition (Hitachi)
• Ucosminexus Application Server Standard (Hitachi)
• Ucosminexus Developer Light (Hitachi)
• Ucosminexus Developer Standard (Hitachi)
• Ucosminexus Service Architect (Hitachi)
• Ucosminexus Service Platform (Hitachi)

References

• http://osvdb.org/32997
• http://osvdb.org/32998
• http://secunia.com/advisories/23843
• http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
• http://www.vupen.com/english/advisories/2007/0326