Vulnerabilites related to Hitachi, Ltd - Job Management Partner 1/Performance Management - Web Console
jvndb-2016-008607
Vulnerability from jvndb
Published
2017-06-30 15:55
Modified
2019-07-25 14:14
Severity ?
Summary
Vulnerability in Cosminexus HTTP Server and Hitachi Web Server
Details
A vulnerability (CVE-2016-8743) exists in Cosminexus HTTP Server and Hitachi Web Server.
Show details on JVN DB website


{
   "@rdf:about": "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-008607.html",
   "dc:date": "2019-07-25T14:14+09:00",
   "dcterms:issued": "2017-06-30T15:55+09:00",
   "dcterms:modified": "2019-07-25T14:14+09:00",
   description: "A vulnerability (CVE-2016-8743) exists in Cosminexus HTTP Server and Hitachi Web Server.",
   link: "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-008607.html",
   "sec:cpe": [
      {
         "#text": "cpe:/a:apache:http_server",
         "@product": "Apache HTTP Server",
         "@vendor": "Apache Software Foundation",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:cosminexus_http_server",
         "@product": "Cosminexus HTTP Server",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:hitachi_application_server",
         "@product": "Hitachi Application Server",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:hitachi_application_server_for_developers",
         "@product": "Hitachi Application Server for Developers",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:hitachi_web_server",
         "@product": "Hitachi Web Server",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:it_operations_director",
         "@product": "Hitachi IT Operations Director",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:job_management_partner_1%2Fit_desktop_management",
         "@product": "Job Management Partner 1/IT Desktop Management",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:job_management_partner_1%2Fit_desktop_management-manager",
         "@product": "Job Management Partner 1/IT Desktop Management - Manager",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:job_management_partner_1_integrated_management",
         "@product": "Job Management Partner 1/Integrated Management",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:job_management_partner_1_performance_management_web_console",
         "@product": "Job Management Partner 1/Performance Management - Web Console",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1%2fautomatic_operation",
         "@product": "JP1/Automatic Operation",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1%2Fit_desktop_management-manager",
         "@product": "JP1/IT Desktop Management - Manager",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1%2fperformance_management",
         "@product": "JP1/Performance Management",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1_automatic_job_management_system_3",
         "@product": "JP1/Automatic Job Management System 3",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1_integrated_management",
         "@product": "JP1/Integrated Management",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1_it_desktop_management",
         "@product": "JP1/IT Desktop Management",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1_operation_analytics",
         "@product": "JP1/Operations Analytics",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1_service_support",
         "@product": "JP1/Service Support",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_application_server",
         "@product": "uCosminexus Application Server",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_application_server_enterprise",
         "@product": "uCosminexus Application Server Enterprise",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_application_server_smart_edition",
         "@product": "uCosminexus Application Server Smart Edition",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_application_server_standard",
         "@product": "uCosminexus Application Server Standard",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_developer",
         "@product": "uCosminexus Developer",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_developer_light",
         "@product": "uCosminexus Developer Light",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_developer_standard",
         "@product": "uCosminexus Developer Standard",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_primary_server",
         "@product": "uCosminexus Primary Server",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_service_architect",
         "@product": "uCosminexus Service Architect",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:ucosminexus_service_platform",
         "@product": "uCosminexus Service Platform",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
   ],
   "sec:cvss": [
      {
         "@score": "4.3",
         "@severity": "Medium",
         "@type": "Base",
         "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
         "@version": "2.0",
      },
      {
         "@score": "4.0",
         "@severity": "Medium",
         "@type": "Base",
         "@vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
         "@version": "3.0",
      },
   ],
   "sec:identifier": "JVNDB-2016-008607",
   "sec:references": [
      {
         "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8743",
         "@id": "CVE-2016-8743",
         "@source": "CVE",
      },
      {
         "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4975",
         "@id": "CVE-2016-4975",
         "@source": "CVE",
      },
      {
         "#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743",
         "@id": "CVE-2016-8743",
         "@source": "NVD",
      },
      {
         "#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975",
         "@id": "CVE-2016-4975",
         "@source": "NVD",
      },
      {
         "#text": "https://cwe.mitre.org/data/definitions/19.html",
         "@id": "CWE-19",
         "@title": "Data Handling(CWE-19)",
      },
   ],
   title: "Vulnerability in Cosminexus HTTP Server and Hitachi Web Server",
}

jvndb-2013-001605
Vulnerability from jvndb
Published
2013-02-22 20:09
Modified
2013-02-22 20:09
Severity ?
() - -
Summary
Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management
Details
Hitachi Tuning Manager, JP1/Performance Management - Web Console, and JP1/Performance Management - Manager Web Option contain Cross-site scripting and cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities can not be exploited, unless logging in these products.
References
Cross-Site Request Forgery(CWE-352) https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
Cross-site Scripting(CWE-79) https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
Show details on JVN DB website


{
   "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-001605.html",
   "dc:date": "2013-02-22T20:09+09:00",
   "dcterms:issued": "2013-02-22T20:09+09:00",
   "dcterms:modified": "2013-02-22T20:09+09:00",
   description: "Hitachi Tuning Manager, JP1/Performance Management - Web Console, and JP1/Performance Management - Manager Web Option contain Cross-site scripting and cross-site request forgery (CSRF) vulnerabilities.\r\n\r\nThese vulnerabilities can not be exploited, unless logging in these products.",
   link: "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-001605.html",
   "sec:cpe": [
      {
         "#text": "cpe:/a:hitachi:job_management_partner_1_performance_management_web_console",
         "@product": "Job Management Partner 1/Performance Management - Web Console",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:jp1%2fperformance_management",
         "@product": "JP1/Performance Management",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
      {
         "#text": "cpe:/a:hitachi:tuning_manager",
         "@product": "Hitachi Tuning Manager",
         "@vendor": "Hitachi, Ltd",
         "@version": "2.2",
      },
   ],
   "sec:cvss": {
      "@score": "9.0",
      "@severity": "High",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
      "@version": "2.0",
   },
   "sec:identifier": "JVNDB-2013-001605",
   "sec:references": [
      {
         "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
         "@id": "CWE-352",
         "@title": "Cross-Site Request Forgery(CWE-352)",
      },
      {
         "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
         "@id": "CWE-79",
         "@title": "Cross-site Scripting(CWE-79)",
      },
   ],
   title: "Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management",
}