All the vulnerabilites related to hitachi - ucosminexus_service_architect
cve-2007-3794
Vulnerability from cvelistv5
Published
2007-07-15 23:00
Modified
2024-08-07 14:28
Severity ?
EPSS score ?
Summary
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.vupen.com/english/advisories/2007/2534 | vdb-entry, x_refsource_VUPEN | |
| http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html | x_refsource_CONFIRM | |
| http://secunia.com/advisories/26025 | third-party-advisory, x_refsource_SECUNIA | |
| http://osvdb.org/37851 | vdb-entry, x_refsource_OSVDB | |
| http://www.securityfocus.com/bid/24905 | vdb-entry, x_refsource_BID |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:28:52.400Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2007-2534",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/2534"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html"
},
{
"name": "26025",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/26025"
},
{
"name": "37851",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37851"
},
{
"name": "24905",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/24905"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-07-13T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer\u0027s Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2008-11-15T10:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2007-2534",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/2534"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html"
},
{
"name": "26025",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/26025"
},
{
"name": "37851",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37851"
},
{
"name": "24905",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/24905"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-3794",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer\u0027s Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2007-2534",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/2534"
},
{
"name": "http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html"
},
{
"name": "26025",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/26025"
},
{
"name": "37851",
"refsource": "OSVDB",
"url": "http://osvdb.org/37851"
},
{
"name": "24905",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/24905"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-3794",
"datePublished": "2007-07-15T23:00:00",
"dateReserved": "2007-07-15T00:00:00",
"dateUpdated": "2024-08-07T14:28:52.400Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2007-0514
Vulnerability from cvelistv5
Published
2007-01-26 00:00
Modified
2024-08-07 12:19
Severity ?
EPSS score ?
Summary
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
References
| ▼ | URL | Tags |
|---|---|---|
| http://osvdb.org/32998 | vdb-entry, x_refsource_OSVDB | |
| http://secunia.com/advisories/23843 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.vupen.com/english/advisories/2007/0326 | vdb-entry, x_refsource_VUPEN | |
| http://osvdb.org/32997 | vdb-entry, x_refsource_OSVDB | |
| http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T12:19:30.531Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "32998",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/32998"
},
{
"name": "23843",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23843"
},
{
"name": "ADV-2007-0326",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0326"
},
{
"name": "32997",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/32997"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-01-24T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-02-01T10:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "32998",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/32998"
},
{
"name": "23843",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23843"
},
{
"name": "ADV-2007-0326",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0326"
},
{
"name": "32997",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/32997"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-0514",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "32998",
"refsource": "OSVDB",
"url": "http://osvdb.org/32998"
},
{
"name": "23843",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/23843"
},
{
"name": "ADV-2007-0326",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0326"
},
{
"name": "32997",
"refsource": "OSVDB",
"url": "http://osvdb.org/32997"
},
{
"name": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-0514",
"datePublished": "2007-01-26T00:00:00",
"dateReserved": "2007-01-25T00:00:00",
"dateUpdated": "2024-08-07T12:19:30.531Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2007-4124
Vulnerability from cvelistv5
Published
2007-08-01 16:00
Modified
2024-08-07 14:46
Severity ?
EPSS score ?
Summary
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/25145 | vdb-entry, x_refsource_BID | |
| http://www.vupen.com/english/advisories/2007/2725 | vdb-entry, x_refsource_VUPEN | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/35706 | vdb-entry, x_refsource_XF | |
| http://osvdb.org/37852 | vdb-entry, x_refsource_OSVDB | |
| http://secunia.com/advisories/26250 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:46:38.979Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "25145",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/25145"
},
{
"name": "ADV-2007-2725",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/2725"
},
{
"name": "hitachi-container-session-hijacking(35706)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35706"
},
{
"name": "37852",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37852"
},
{
"name": "26250",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/26250"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-07-31T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user\u0027s session data, and possibly gain privileges."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "25145",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/25145"
},
{
"name": "ADV-2007-2725",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/2725"
},
{
"name": "hitachi-container-session-hijacking(35706)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35706"
},
{
"name": "37852",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37852"
},
{
"name": "26250",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/26250"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-4124",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user\u0027s session data, and possibly gain privileges."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "25145",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/25145"
},
{
"name": "ADV-2007-2725",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/2725"
},
{
"name": "hitachi-container-session-hijacking(35706)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35706"
},
{
"name": "37852",
"refsource": "OSVDB",
"url": "http://osvdb.org/37852"
},
{
"name": "26250",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/26250"
},
{
"name": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-4124",
"datePublished": "2007-08-01T16:00:00",
"dateReserved": "2007-08-01T00:00:00",
"dateUpdated": "2024-08-07T14:46:38.979Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2007-1854
Vulnerability from cvelistv5
Published
2007-04-03 16:00
Modified
2024-08-07 13:13
Severity ?
EPSS score ?
Summary
Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.vupen.com/english/advisories/2007/1170 | vdb-entry, x_refsource_VUPEN | |
| http://www.securityfocus.com/bid/23213 | vdb-entry, x_refsource_BID | |
| http://osvdb.org/34768 | vdb-entry, x_refsource_OSVDB | |
| http://secunia.com/advisories/24683 | third-party-advisory, x_refsource_SECUNIA | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/33318 | vdb-entry, x_refsource_XF | |
| http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:13:41.560Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2007-1170",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1170"
},
{
"name": "23213",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/23213"
},
{
"name": "34768",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/34768"
},
{
"name": "24683",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24683"
},
{
"name": "hitachi-container-information-disclosure(33318)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33318"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-03-30T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to \"unintended other requests.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2007-1170",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1170"
},
{
"name": "23213",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/23213"
},
{
"name": "34768",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/34768"
},
{
"name": "24683",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24683"
},
{
"name": "hitachi-container-information-disclosure(33318)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33318"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1854",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to \"unintended other requests.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2007-1170",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1170"
},
{
"name": "23213",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/23213"
},
{
"name": "34768",
"refsource": "OSVDB",
"url": "http://osvdb.org/34768"
},
{
"name": "24683",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24683"
},
{
"name": "hitachi-container-information-disclosure(33318)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33318"
},
{
"name": "http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1854",
"datePublished": "2007-04-03T16:00:00",
"dateReserved": "2007-04-03T00:00:00",
"dateUpdated": "2024-08-07T13:13:41.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2007-5810
Vulnerability from cvelistv5
Published
2007-11-05 17:00
Modified
2024-08-07 15:47
Severity ?
EPSS score ?
Summary
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
References
| ▼ | URL | Tags |
|---|---|---|
| http://osvdb.org/42026 | vdb-entry, x_refsource_OSVDB | |
| http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html | x_refsource_CONFIRM | |
| http://secunia.com/advisories/27421 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.vupen.com/english/advisories/2007/3666 | vdb-entry, x_refsource_VUPEN | |
| http://www.securityfocus.com/bid/26271 | vdb-entry, x_refsource_BID |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T15:47:00.407Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "42026",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/42026"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html"
},
{
"name": "27421",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27421"
},
{
"name": "ADV-2007-3666",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"name": "26271",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26271"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-10-31T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-11-17T10:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "42026",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/42026"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html"
},
{
"name": "27421",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27421"
},
{
"name": "ADV-2007-3666",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"name": "26271",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26271"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-5810",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "42026",
"refsource": "OSVDB",
"url": "http://osvdb.org/42026"
},
{
"name": "http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html"
},
{
"name": "27421",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27421"
},
{
"name": "ADV-2007-3666",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"name": "26271",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26271"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-5810",
"datePublished": "2007-11-05T17:00:00",
"dateReserved": "2007-11-05T00:00:00",
"dateUpdated": "2024-08-07T15:47:00.407Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2009-4776
Vulnerability from cvelistv5
Published
2010-04-21 14:00
Modified
2024-09-16 17:58
Severity ?
EPSS score ?
Summary
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html | x_refsource_CONFIRM | |
| http://osvdb.org/57834 | vdb-entry, x_refsource_OSVDB | |
| http://www.securityfocus.com/bid/36309 | vdb-entry, x_refsource_BID | |
| http://secunia.com/advisories/36622 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.vupen.com/english/advisories/2009/2574 | vdb-entry, x_refsource_VUPEN |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T07:17:25.617Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html"
},
{
"name": "57834",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/57834"
},
{
"name": "36309",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/36309"
},
{
"name": "36622",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36622"
},
{
"name": "ADV-2009-2574",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/2574"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer\u0027s Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2010-04-21T14:00:00Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html"
},
{
"name": "57834",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/57834"
},
{
"name": "36309",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/36309"
},
{
"name": "36622",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36622"
},
{
"name": "ADV-2009-2574",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/2574"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-4776",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer\u0027s Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html"
},
{
"name": "57834",
"refsource": "OSVDB",
"url": "http://osvdb.org/57834"
},
{
"name": "36309",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/36309"
},
{
"name": "36622",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/36622"
},
{
"name": "ADV-2009-2574",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/2574"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-4776",
"datePublished": "2010-04-21T14:00:00Z",
"dateReserved": "2010-04-21T00:00:00Z",
"dateUpdated": "2024-09-16T17:58:12.265Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2007-5281
Vulnerability from cvelistv5
Published
2007-10-09 00:00
Modified
2024-08-07 15:24
Severity ?
EPSS score ?
Summary
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/25935 | vdb-entry, x_refsource_BID | |
| http://www.vupen.com/english/advisories/2007/3375 | vdb-entry, x_refsource_VUPEN | |
| http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html | x_refsource_CONFIRM | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/36965 | vdb-entry, x_refsource_XF | |
| http://secunia.com/advisories/27075 | third-party-advisory, x_refsource_SECUNIA |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T15:24:42.492Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "25935",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/25935"
},
{
"name": "ADV-2007-3375",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3375"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html"
},
{
"name": "hitachi-cosminexus-jsse-dos(36965)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36965"
},
{
"name": "27075",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27075"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-10-05T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer\u0027s Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "25935",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/25935"
},
{
"name": "ADV-2007-3375",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3375"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html"
},
{
"name": "hitachi-cosminexus-jsse-dos(36965)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36965"
},
{
"name": "27075",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27075"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-5281",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer\u0027s Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "25935",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/25935"
},
{
"name": "ADV-2007-3375",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3375"
},
{
"name": "http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html"
},
{
"name": "hitachi-cosminexus-jsse-dos(36965)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36965"
},
{
"name": "27075",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27075"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-5281",
"datePublished": "2007-10-09T00:00:00",
"dateReserved": "2007-10-08T00:00:00",
"dateUpdated": "2024-08-07T15:24:42.492Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2007-5809
Vulnerability from cvelistv5
Published
2007-11-05 17:00
Modified
2024-08-07 15:47
Severity ?
EPSS score ?
Summary
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
References
| ▼ | URL | Tags |
|---|---|---|
| http://secunia.com/advisories/27421 | third-party-advisory, x_refsource_SECUNIA | |
| http://www.vupen.com/english/advisories/2007/3666 | vdb-entry, x_refsource_VUPEN | |
| http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html | x_refsource_CONFIRM | |
| http://www.securityfocus.com/bid/26271 | vdb-entry, x_refsource_BID | |
| http://osvdb.org/42027 | vdb-entry, x_refsource_OSVDB |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T15:47:00.451Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "27421",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27421"
},
{
"name": "ADV-2007-3666",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html"
},
{
"name": "26271",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26271"
},
{
"name": "42027",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/42027"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-10-31T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-11-17T10:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "27421",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27421"
},
{
"name": "ADV-2007-3666",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html"
},
{
"name": "26271",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26271"
},
{
"name": "42027",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/42027"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-5809",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "27421",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27421"
},
{
"name": "ADV-2007-3666",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"name": "http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html",
"refsource": "CONFIRM",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html"
},
{
"name": "26271",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26271"
},
{
"name": "42027",
"refsource": "OSVDB",
"url": "http://osvdb.org/42027"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-5809",
"datePublished": "2007-11-05T17:00:00",
"dateReserved": "2007-11-05T00:00:00",
"dateUpdated": "2024-08-07T15:47:00.451Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Vulnerability from fkie_nvd
Published
2010-04-21 14:30
Modified
2024-11-21 01:10
Severity ?
Summary
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus\\/opentp1_web_web_front-endset:02-70:*:*:*:*:*:*:*",
"matchCriteriaId": "5D30EBF7-14BC-459C-92FA-190C6175FE1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus\\/opentp1_web_web_front-endset:02-70-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "3A745542-F2A2-41D7-ADAA-4131F3827714",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "2CB68D89-278F-487B-8AB2-579159EB3E78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70:-:standard:*:*:*:*:*",
"matchCriteriaId": "6E9D5C04-BEF5-4025-81BA-64AFAFDC6355",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/a:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "686AC2A6-AF78-413F-9479-DBCB26BF9E20",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/a:-:standard:*:*:*:*:*",
"matchCriteriaId": "3E6E239F-9470-4BA7-A44F-5D01BC22EDF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/e:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "EDAE5CB8-45FC-4F71-A0D6-2E8785DB87DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/e:-:standard:*:*:*:*:*",
"matchCriteriaId": "D7EF08BC-FF97-4C9D-BB32-6EC76F5BED25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/f:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "CBD5D60B-9DC1-4954-9234-E1CF7A25D821",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/f:-:standard:*:*:*:*:*",
"matchCriteriaId": "0086C77F-4CCF-48D7-93D7-C0254DE74F79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/g:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "E9B561DC-889D-4E41-8FDB-CE1F14A3D7B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/g:-:standard:*:*:*:*:*",
"matchCriteriaId": "FB2DFA0C-3754-4E49-9E48-3B229EDB2819",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/l:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "8B4930B4-27A5-4F1C-BEDF-1A95D12F2AC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/l:-:standard:*:*:*:*:*",
"matchCriteriaId": "8F8E7454-4A42-4988-9F8F-254ED2CAC08B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/n:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "14404C77-A024-4C2E-B0EB-72A6F6627DF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\\/n:-:standard:*:*:*:*:*",
"matchCriteriaId": "2ED28A92-8D31-4CCE-ADDD-A5F1B632EB14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70f:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "0AE1CF72-6E2F-40DF-B316-2B6BD30A1B2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-70f:-:standard:*:*:*:*:*",
"matchCriteriaId": "48350BE4-FA86-4772-B99C-35CA4575C774",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-71:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "AC534B14-B492-469E-8E1F-D7BC4CE3A796",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-71:-:standard:*:*:*:*:*",
"matchCriteriaId": "45A36E6B-331F-4462-B85A-27F77F8076A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-71-\\/f:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "44946927-4A22-4A4E-9130-9E382C55FA50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-71-\\/f:-:standard:*:*:*:*:*",
"matchCriteriaId": "CEDC4189-4763-48AB-B377-7CE7A4C8718E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-71-\\/g:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "513AE6DF-33F6-4485-A3D7-12A3B6121226",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-71-\\/g:-:standard:*:*:*:*:*",
"matchCriteriaId": "44716AEA-064A-4F24-A4B1-15523E0A27DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-72:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "AE180EF6-9848-4D38-8D0B-9AAB18F4B4D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-72:-:standard:*:*:*:*:*",
"matchCriteriaId": "8B500964-003E-4493-8902-5E90C89440DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-72-\\/d:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "29DA485B-FE11-4E77-8042-8554EF0B97B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06-72-\\/d:-:standard:*:*:*:*:*",
"matchCriteriaId": "E8643104-886B-4E90-A1CB-0DA7AB799ADE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:6.7:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "C7DF3E6F-A096-46BE-9D26-0278D50E6550",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:6.7:-:standard:*:*:*:*:*",
"matchCriteriaId": "9CF7583C-1A12-4B07-9EF7-2B4A1B0BDFAF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:7:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "7227EEAD-72ED-42EA-A6F8-506BAB303C93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:7:-:standard:*:*:*:*:*",
"matchCriteriaId": "D24F7D41-86E4-4DF8-B525-56ECF1D35721",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07-00:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "66A30941-E1FE-46D3-993A-76FB8A39D502",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "D993B210-1E35-48A4-B0DF-8F3443803ACF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07-10:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "5F03A5B9-8D94-4437-933E-1BA02CD04040",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07-10:-:standard:*:*:*:*:*",
"matchCriteriaId": "023093FD-4275-41C8-ABF4-D2F0606E90FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07-60:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "3EE4CE0D-2DC7-4529-9523-BFD24DF3BE05",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07-60:-:standard:*:*:*:*:*",
"matchCriteriaId": "DE8C23CB-F5A3-4AF0-A433-5A331424F7B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:8:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "0C3D3425-B2A7-4764-B0AC-354632950B68",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:8:-:standard:*:*:*:*:*",
"matchCriteriaId": "D0E28514-5D2E-4FC4-8C65-2AC39B4227ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:08-00:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "E92F3386-33FA-4CD9-B2BC-1F03E940027C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:08-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "C62EF21A-5094-40A6-A96B-67D2082831DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:06-70:*:*:*:*:*:*:*",
"matchCriteriaId": "B023A2D4-49E4-47A7-8B83-716BCD93995F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:06-70-\\/f:*:*:*:*:*:*:*",
"matchCriteriaId": "5DC6EDF8-6221-421C-9C07-52024EB5E0C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:06-71:*:*:*:*:*:*:*",
"matchCriteriaId": "403FD1B5-5D87-4B9B-A258-1EE5A7FE2E29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:06-71-\\/f:*:*:*:*:*:*:*",
"matchCriteriaId": "2C43BE1B-A4F9-4F82-814E-CFE09735C5B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:07-00:*:*:*:*:*:*:*",
"matchCriteriaId": "3F7CD480-B966-4934-94E3-EBB2CCE03B94",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:07-60:*:*:*:*:*:*:*",
"matchCriteriaId": "602F9DF8-230D-4B2D-88AF-530DD6D438E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:8:*:*:*:*:*:*:*",
"matchCriteriaId": "602B446D-2081-4360-B729-341167C46CB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:08-00:*:*:*:*:*:*:*",
"matchCriteriaId": "4368D006-970B-44A0-920C-B2E7C6B13868",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration:06-20:-:server:*:*:*:*:*",
"matchCriteriaId": "7B4070B7-020C-4B43-B342-87423F5DF9BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration:06-20-\\/d:-:server:*:*:*:*:*",
"matchCriteriaId": "EFEA87BE-9F4B-4F6C-AF12-D1F829A8E7F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration:06-30:-:server:*:*:*:*:*",
"matchCriteriaId": "92F3066F-B335-49B8-BD21-B6AC274FEF89",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration:06-30-\\/f:-:server:*:*:*:*:*",
"matchCriteriaId": "F2043CED-54A5-45EB-980C-E871C1D7A343",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration:06-35:-:server:*:*:*:*:*",
"matchCriteriaId": "B3A5C9F4-733F-462E-871B-BAB6D7C67A01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration:06-35-\\/f:-:server:*:*:*:*:*",
"matchCriteriaId": "78A54AF2-FBB8-4544-AB97-CCD2C5A6A9B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:6:-:pro:*:*:*:*:*",
"matchCriteriaId": "F77351A8-2D61-4DCA-9BA8-CD3553D6210F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:6:-:standard:*:*:*:*:*",
"matchCriteriaId": "3AFFE093-8268-4AF0-A463-35075091E87B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-70:-:light:*:*:*:*:*",
"matchCriteriaId": "9D224487-C16E-43C0-AA14-107C45A0429F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-70:-:pro:*:*:*:*:*",
"matchCriteriaId": "137CAEFA-E1A8-4B7C-87BE-6ECDA81DC4AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-70:-:standard:*:*:*:*:*",
"matchCriteriaId": "BC371E79-795D-43CA-BEBE-968FF04247C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-70-\\/f:-:light:*:*:*:*:*",
"matchCriteriaId": "A11A2989-44C6-4E63-B133-B712222D91FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-70-\\/f:-:pro:*:*:*:*:*",
"matchCriteriaId": "88ABDF38-5088-41B4-8C51-689411981BB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-70-\\/f:-:standard:*:*:*:*:*",
"matchCriteriaId": "9BE956FA-7582-49D9-B7BB-A390FC3736A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-71:-:light:*:*:*:*:*",
"matchCriteriaId": "DF233734-189E-49EF-89A5-EE9C89785E72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-71:-:pro:*:*:*:*:*",
"matchCriteriaId": "D17A2FDF-43F7-4274-AFEF-FA020D2E98D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-71:-:standard:*:*:*:*:*",
"matchCriteriaId": "91C4431A-C72E-4FBF-A62A-5D5A6C491B66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-71-\\/f:-:light:*:*:*:*:*",
"matchCriteriaId": "BCB97638-3901-477C-AF09-51EE0F6E4400",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-71-\\/f:-:pro:*:*:*:*:*",
"matchCriteriaId": "2CE561A2-079A-4D70-99DF-1E9AC27B06FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06-71-\\/f:-:standard:*:*:*:*:*",
"matchCriteriaId": "50DA343D-4678-44BF-81F9-235241802A2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:6.7:-:light:*:*:*:*:*",
"matchCriteriaId": "E5E8AEED-53F4-4E10-AFA6-137C6F0E6546",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:6.7:-:pro:*:*:*:*:*",
"matchCriteriaId": "600ED495-ECCA-493F-9FCB-3323313B4C3D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:6.7:-:standard:*:*:*:*:*",
"matchCriteriaId": "669A25E0-BBC4-40F0-B233-5A205B77A0AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:7:-:light:*:*:*:*:*",
"matchCriteriaId": "6A849A4A-8DBC-48EF-93E7-FC1A749BFAFA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:7:-:pro:*:*:*:*:*",
"matchCriteriaId": "52F83F41-6566-4A16-BF3B-44ADF26B2F04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:7:-:standard:*:*:*:*:*",
"matchCriteriaId": "63CF5BCE-93C3-40D3-B930-02898F68C8BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:07-00:-:pro:*:*:*:*:*",
"matchCriteriaId": "D118B608-BEE9-43FE-87E9-5A1C4168843B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:07-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "D608AD0B-2CC2-4FB8-99EB-8DA43C1B6FBA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:07-60:-:pro:*:*:*:*:*",
"matchCriteriaId": "C4D2DAB4-1C16-4473-8F6F-8FD85E81C11A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:07-60:-:standard:*:*:*:*:*",
"matchCriteriaId": "C64DA319-4086-407B-B289-1865910DFE95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:8:-:light:*:*:*:*:*",
"matchCriteriaId": "B1C6FCBF-7ED6-4C8F-84A7-10FB18932238",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:8:-:pro:*:*:*:*:*",
"matchCriteriaId": "1C943C83-B05A-4373-BF0D-969D1353035A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:8:-:standard:*:*:*:*:*",
"matchCriteriaId": "3C05AA3F-6F6D-46E3-A49A-371DD406A64D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:08-00:-:pro:*:*:*:*:*",
"matchCriteriaId": "20F18411-774B-4F5E-A39B-B7C9D7D9AECB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:08-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "C8429E4B-A47A-4651-A2AA-C9A78AF78AC6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_operator:6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "637F87F0-AFD1-4042-8E9A-3A8E94FF34FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_operator:7:*:*:*:*:*:*:*",
"matchCriteriaId": "0AD47BD9-0E9D-4C80-AAE5-CD93CDB38B57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_operator:07-00:*:*:*:*:*:*:*",
"matchCriteriaId": "7D1FA2C7-5341-446D-AEBE-64AEBB0DABCE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_operator:07-60:*:*:*:*:*:*:*",
"matchCriteriaId": "6159C8FD-F2A6-4212-850D-8C2F1C8BBD72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_operator:8:*:*:*:*:*:*:*",
"matchCriteriaId": "DA84041F-3066-4BEF-AE80-5836051CA7B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "DC344B37-D163-4D89-AC63-A082C2505279",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:7:*:*:*:*:*:*:*",
"matchCriteriaId": "88C9E58D-37F5-4E8A-8715-3CF1A599FDF3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:07-00:*:*:*:*:*:*:*",
"matchCriteriaId": "D05BEA3F-C8FB-4628-9C43-FF0A36BF129C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:07-60:*:*:*:*:*:*:*",
"matchCriteriaId": "D362185A-DB98-45B1-902E-345322F8A0DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:8:*:*:*:*:*:*:*",
"matchCriteriaId": "A221D5E9-F4B0-4D01-84DF-1C87446F1ADF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:08-00:*:*:*:*:*:*:*",
"matchCriteriaId": "63BE9CAA-2974-4D98-B2D4-BFEB50F05450",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "F468861C-CBCA-4B55-B852-4E615381A158",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:7:*:*:*:*:*:*:*",
"matchCriteriaId": "22E4038F-A9A3-4165-B81E-615BC832C916",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:07-00:*:*:*:*:*:*:*",
"matchCriteriaId": "535EB81E-FDE3-4333-A1D8-B13852BA9F84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:07-10:*:*:*:*:*:*:*",
"matchCriteriaId": "71869635-D253-417D-A13C-A2F6DA87858E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:07-60:*:*:*:*:*:*:*",
"matchCriteriaId": "2DFCCFAC-A7FA-4926-A5A8-B1649771C2FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:8:*:*:*:*:*:*:*",
"matchCriteriaId": "F18CD959-D5CD-47B7-9C35-437853DBBFA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:08-00:*:*:*:*:*:*:*",
"matchCriteriaId": "2660CD8B-B3F7-4209-AD10-D94A7B9F58E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-00:*:*:*:*:*:*:*",
"matchCriteriaId": "F1CD4F13-CBB2-4F29-AEE9-FA48CB86C909",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-05:*:*:*:*:*:*:*",
"matchCriteriaId": "7F2E274F-DC9C-48F6-9599-988BF14ADABD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-05-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "D814D40C-2A3C-4006-886C-B1DC53902D24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-05-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "1205F185-E1C7-4F8E-91CB-98126D72DC13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-05-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "FACB8771-9AFC-4FE4-BB5A-07A23CF0BBB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-05-\\/d:*:*:*:*:*:*:*",
"matchCriteriaId": "E53A647F-DEED-4FDA-A7EE-8F63EB78A876",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-07:*:*:*:*:*:*:*",
"matchCriteriaId": "4839F650-9A07-4120-AB26-FB69CC17611D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:01-07-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "B024696B-A999-4F95-9A54-86345BA147C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:02-00:*:*:*:*:*:*:*",
"matchCriteriaId": "12B409D6-B45D-46F2-A2C6-4345AF159948",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:02-00-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "A952331D-749E-4106-AC29-976EFDA0DF33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:02-00-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "A8877EF6-38F8-466C-A699-55DC577623B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:02-00-\\/d:*:*:*:*:*:*:*",
"matchCriteriaId": "9548D481-961D-4093-B464-E3643B2D4A17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:02-05:*:*:*:*:*:*:*",
"matchCriteriaId": "F69BFB31-114F-464E-A43B-0352777A1A38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:02-05-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "64880EFE-512F-4899-87C3-7033DCCE417D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:processing_kit_for_xml:02-05-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "770C1017-2B8C-46A1-B62E-E32B8EBDBC55",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:ibm_xl_c\\/c\\+\\+_v7_for_aix_\\\u0026_hitachi_developer\\\u0027s_kit_for_java:01-00:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "1320E465-81DD-4C48-B97D-C6C29CF1454A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ibm_xl_c\\/c\\+\\+_v8_for_aix_\\\u0026_hitachi_developer\\\u0027s_kit_for_java:01-00:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "017BFE19-D746-4832-A383-3E75DF6659AD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration:07-20:-:server:*:*:*:*:*",
"matchCriteriaId": "8AEAA75E-5BB1-4060-B93A-8D486E43C22F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration:07-20-\\/d:-:server:*:*:*:*:*",
"matchCriteriaId": "058C0CDA-AB38-4802-A391-34AC550D744E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration:07-30:-:server:*:*:*:*:*",
"matchCriteriaId": "2E0DC509-A04D-4009-BE94-AD71ABA7E540",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration:07-30-\\/f:-:server:*:*:*:*:*",
"matchCriteriaId": "8B4E1DCC-0360-4DD6-8BB8-F843A935F572",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration:07-35:-:server:*:*:*:*:*",
"matchCriteriaId": "212F5DAE-9C20-475A-84D1-35F386090A72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration:07-35-\\/f:-:server:*:*:*:*:*",
"matchCriteriaId": "D714CDF5-FD62-43B5-A1B0-53ED8FDA6F60",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow_set:07-50:*:*:*:*:*:*:*",
"matchCriteriaId": "F5DEC484-75F1-48B7-B59A-6FE208D1257B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow_set:07-50-\\/d:*:*:*:*:*:*:*",
"matchCriteriaId": "DF469482-A1CC-496C-A74B-1F00D9619954",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow_set:07-60:*:*:*:*:*:*:*",
"matchCriteriaId": "F1DCD78F-2BC0-44FA-BAA0-A519A7290F2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow_set:07-60-\\/i:*:*:*:*:*:*:*",
"matchCriteriaId": "09B27467-07A9-45FE-8E32-54A838084D49",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:06-70:*:*:*:*:*:*:*",
"matchCriteriaId": "043DC056-9D9A-4C70-9B19-C29C738A7735",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:06-70-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "37E85F04-0D8E-479E-9BAC-6FDEAE44D650",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:06-70-\\/f:*:*:*:*:*:*:*",
"matchCriteriaId": "68C5E1F6-2A00-4AF0-A45C-3AF048CA4F22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-00:*:*:*:*:*:*:*",
"matchCriteriaId": "789FE125-1BBE-4E6D-87B6-74942E7198B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-00-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "2E8B0E83-15EA-4573-A7F6-6F7D2DB653EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-00-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "B06969FB-28FA-470C-BD4A-1F4BC90760D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-10:*:*:*:*:*:*:*",
"matchCriteriaId": "DD06676E-5664-422A-BCAE-7F3467E9CBA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-10-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "845D3A84-F6CD-45AA-B67C-5F48A2B73EC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-11:*:*:*:*:*:*:*",
"matchCriteriaId": "9D8AC572-CC8D-45F7-83EA-6DAA8D7E1649",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-11-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "6250A039-0686-439E-BB95-AD5C424A9D88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-20:*:*:*:*:*:*:*",
"matchCriteriaId": "D682CC77-F182-4989-B37F-44259AB5186D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-standard_set:07-20-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "762C3E8E-EA7B-4EE3-AE3A-5CCD462009E1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_set:07-50:*:*:*:*:*:*:*",
"matchCriteriaId": "81DD486C-1F08-4979-8367-28492AAFADA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_set:07-50-\\/d:*:*:*:*:*:*:*",
"matchCriteriaId": "87BD7B88-BD12-43BC-95C3-8C96D0F26903",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:06-70:*:*:*:*:*:*:*",
"matchCriteriaId": "96854991-0023-4563-A77E-920C4A8DD33E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:06-70-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "75A3AB2E-AFFB-4729-A96B-E91E7D21E9F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:06-70-\\/f:*:*:*:*:*:*:*",
"matchCriteriaId": "669AF6A9-46FF-486D-95D4-37511BBF78A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-00:*:*:*:*:*:*:*",
"matchCriteriaId": "B8A6D2BF-F113-4F18-91D6-F682F4031638",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-00-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "FCB7299E-4DC8-42F7-83BD-7B48F95D0C8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-00-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "E87D7234-A9C2-4D00-8E18-59AA00A19B21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-10:*:*:*:*:*:*:*",
"matchCriteriaId": "CEDCDB39-96A0-47C7-8147-72E7B4531174",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-10-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "C4922EBE-3BA0-4CB4-97DA-B43925D03CB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-11:*:*:*:*:*:*:*",
"matchCriteriaId": "2535EFD7-DAC9-47EB-A07E-1CA144334C27",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-11-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "A1EA141B-B540-474E-B45B-DC4D40CE4E9F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-20:*:*:*:*:*:*:*",
"matchCriteriaId": "132A469B-4419-4DBD-BE6B-F45274C468AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-professional_library_set:07-20-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "696CB559-1003-43B0-B294-B5CFCA7949D6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_set:07-50:*:*:*:*:*:*:*",
"matchCriteriaId": "6EAD4A8B-EFE5-4567-AE3A-F25BDFEEAA24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_set:07-50-\\/d:*:*:*:*:*:*:*",
"matchCriteriaId": "22A05124-3B2B-4788-881D-9A08BC863FE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_set:07-60:*:*:*:*:*:*:*",
"matchCriteriaId": "9DC63B97-7355-4262-A981-A49A11053528",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_set:07-60-\\/i:*:*:*:*:*:*:*",
"matchCriteriaId": "75D92591-2A3B-4023-AFDC-1E77D3933658",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:06-70:*:*:*:*:*:*:*",
"matchCriteriaId": "075893D8-C7F4-4354-A313-2DE201F27C63",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:06-70-\\/f:*:*:*:*:*:*:*",
"matchCriteriaId": "69F1E95C-D573-4F6D-AEBF-4D2F5AAA3559",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-00:*:*:*:*:*:*:*",
"matchCriteriaId": "37D472E5-9A3D-46FB-8436-B66AE1BBF5EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-00-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "B754CEF7-0B84-4020-81DE-D15072C0CD3D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-10:*:*:*:*:*:*:*",
"matchCriteriaId": "85A57118-1425-43FB-A673-DA0449D6032A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-10-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "C5027E0C-BF3B-4742-8D6F-9FB44930BDCF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-11:*:*:*:*:*:*:*",
"matchCriteriaId": "B52DCAD4-2068-439B-BF59-6E6561AC2990",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-11-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "817048FF-E15F-49F5-9154-4897264F58FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-20:*:*:*:*:*:*:*",
"matchCriteriaId": "483D301C-2266-4868-AB16-7A0CF5FB0A7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow-developer_client_set:07-20-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "E1E7A5EC-E7AC-421D-B881-B7C1BF5E6841",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:developer\\\u0027s_kit_for_java:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EC3E7D53-639D-4428-A743-98AC5FDCE5B3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:01-00:*:*:*:*:*:*:*",
"matchCriteriaId": "9435B205-C282-4152-8FEA-50B7E3D2DA38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:01-00-\\/b:*:*:*:*:*:*:*",
"matchCriteriaId": "919EAA00-7043-41DB-B9F6-B4F77054D90E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:01-01:*:*:*:*:*:*:*",
"matchCriteriaId": "8D94E2EB-EFA4-4BFF-B786-5BC5E1BE638B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:01-01-\\/c:*:*:*:*:*:*:*",
"matchCriteriaId": "51A9283F-2412-45E9-867E-C32307D2ABAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:02-00:*:*:*:*:*:*:*",
"matchCriteriaId": "F03CC2CE-0146-46FC-8A55-79393479113D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:02-00-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "B357F157-0211-40FE-9442-7E06117D443D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:02-50:*:*:*:*:*:*:*",
"matchCriteriaId": "499A08A8-EBF2-4A76-9B8B-A07BF529D740",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus\\/opentp1_web_web_front-endset:02-50-\\/a:*:*:*:*:*:*:*",
"matchCriteriaId": "CA6CE164-2CE5-46A1-B32C-1C367569113C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:5:*:*:*:*:*:*:*",
"matchCriteriaId": "B4CC876E-1512-4C4C-9145-C79AED7B04F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-00:*:*:*:*:*:*:*",
"matchCriteriaId": "31AEDCFF-F7FD-4A13-AAC4-1BB2BFD1E833",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-00-\\/i:*:*:*:*:*:*:*",
"matchCriteriaId": "7B0939D4-5A49-4A3E-9F7E-29E8692545A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-00-\\/s:*:*:*:*:*:*:*",
"matchCriteriaId": "9D0F8E53-BDB2-4F72-B90A-325A4F1D0394",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-01:*:*:*:*:*:*:*",
"matchCriteriaId": "0E8585FA-103E-4C42-B6E6-6EFEC533D4D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-01-\\/l:*:*:*:*:*:*:*",
"matchCriteriaId": "D037968B-5448-4538-87E0-FFA296C5CC18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-02:*:*:*:*:*:*:*",
"matchCriteriaId": "B56AE902-68EA-499C-869D-479A9228DC3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-02-\\/e:*:*:*:*:*:*:*",
"matchCriteriaId": "E5AFAA79-EB60-4089-B2D9-723EAD7D0A26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-05:*:*:*:*:*:*:*",
"matchCriteriaId": "1835F905-CD07-453F-A331-35E78097039D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-05-\\/i:*:*:*:*:*:*:*",
"matchCriteriaId": "BD9479D4-3B4D-447D-B9ED-A78A47A23C7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-05-\\/o:*:*:*:*:*:*:*",
"matchCriteriaId": "F047C97B-94F3-4FB5-B34C-76117BE10137",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05-05-\\/p:*:*:*:*:*:*:*",
"matchCriteriaId": "E0F0366B-9326-4175-9C31-7C990ABA335E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:*:*:*:*:*:*:*",
"matchCriteriaId": "B37A3EC0-5E2B-4D97-8294-8906A439AD4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "4B5B3C2C-E9A5-4633-88F1-6234F4EDB134",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "E3E98472-8F31-4C0E-92E3-5A2618F0AA5F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "4B9917F7-E1BF-47BB-8040-ECD8496AC2AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/a:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "404011D3-EB03-48E8-A539-2229E11CEAFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/a:-:standard:*:*:*:*:*",
"matchCriteriaId": "D3609484-1D36-4BA8-B0CF-2193A2606B63",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/b:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "F89BA7CF-6CE0-47EA-8ADE-77DF13F35000",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/b:-:standard:*:*:*:*:*",
"matchCriteriaId": "4EE3E2AD-A928-48F5-BA03-688AA6884F1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/e:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "4C8CB4BA-F440-4CB3-A335-36735CF08C20",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/e:-:standard:*:*:*:*:*",
"matchCriteriaId": "7D72FAFB-2FDF-4761-AAD6-0BC3F294C7D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/i:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "03D5D563-716D-4A3B-87BA-96DCC610BA01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-00-\\/i:-:standard:*:*:*:*:*",
"matchCriteriaId": "CBE7CBFE-9713-44B6-816E-103230BD6187",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "7CBBAAB3-63A5-4D21-8928-B8808679F401",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02:-:standard:*:*:*:*:*",
"matchCriteriaId": "BD09629E-4D06-4A55-972E-F2106C391275",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02-\\/d:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "1705CFC2-0266-4169-BC5B-130301643EAE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02-\\/d:-:standard:*:*:*:*:*",
"matchCriteriaId": "38FA4B4C-1A32-40EE-B9A0-C324835AB9C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02-\\/f:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "8D67B57D-9974-4365-AAE8-F02226948695",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02-\\/f:-:standard:*:*:*:*:*",
"matchCriteriaId": "E04FF433-CF28-48AA-8A40-46F8DCA194A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02-\\/g:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "D11525EF-32DF-448D-8183-5E0DD01E3DF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-02-\\/g:-:standard:*:*:*:*:*",
"matchCriteriaId": "FDD2C08A-D985-42C7-9DD1-6F7F3E639738",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "03C3E4C4-0C3A-4A09-A2E5-C00E75EBBB66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50:-:standard:*:*:*:*:*",
"matchCriteriaId": "8AEF3AC3-B3D7-4B2D-9441-B999F3CD6C9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/b:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "7AE565DC-0C6E-4285-921C-ADB0C0F2D152",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/b:-:standard:*:*:*:*:*",
"matchCriteriaId": "CAEC32C1-3762-45F8-9292-577D9F73C7F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/c:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "52A7FEEB-5B65-40AA-A74E-F1A9AAE1CD38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/c:-:standard:*:*:*:*:*",
"matchCriteriaId": "11FB6CEC-19C5-46F0-B6DC-4B1B1C0465B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/e:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "1AADAEE7-0250-4562-89C2-02C23EDA68CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/e:-:standard:*:*:*:*:*",
"matchCriteriaId": "0BBF19E2-E7E0-47BE-BF95-0A8357D7A92F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/f:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "D58CB19F-405D-4D81-8A1A-A7551F925566",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/f:-:standard:*:*:*:*:*",
"matchCriteriaId": "04329721-C6ED-480B-8032-599C9279AAE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/i:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "11865094-F19D-46B0-B229-AE465C90FFAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-50-\\/i:-:standard:*:*:*:*:*",
"matchCriteriaId": "A99B3783-5A10-4444-BDAB-6DC735F6D303",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "BE4C75B0-AB19-450C-8577-56BEDDDBAE4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51:-:standard:*:*:*:*:*",
"matchCriteriaId": "6AC2C22A-3293-4DAD-B7AB-65037DDA9AA2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51-\\/b:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "6ADFCC97-CFBD-4065-B3A9-0D4B4E030B91",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51-\\/b:-:standard:*:*:*:*:*",
"matchCriteriaId": "28386A4A-299B-4C4B-9A20-D7F817CB5113",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51-\\/e:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "9953C5A8-D534-4EDC-ADAA-680C14F1ECE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51-\\/e:-:standard:*:*:*:*:*",
"matchCriteriaId": "3788BD33-8280-4BD8-84D8-8EF11ED360CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51-\\/k:-:enterprise:*:*:*:*:*",
"matchCriteriaId": "81B7ABEB-999A-440E-804F-6F62F78BD125",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06-51-\\/k:-:standard:*:*:*:*:*",
"matchCriteriaId": "2986ED7E-1137-4EA2-A775-C13076A4ADA9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-00:*:*:*:*:*:*:*",
"matchCriteriaId": "005319D9-5009-4D96-B1A9-E7E69EA65288",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-00-\\/i:*:*:*:*:*:*:*",
"matchCriteriaId": "999B7A35-D6F8-435B-A921-C94E6C67386F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-02:*:*:*:*:*:*:*",
"matchCriteriaId": "4873A93E-EB03-4C07-9392-1DB1646C808C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-02-\\/g:*:*:*:*:*:*:*",
"matchCriteriaId": "71D9C44F-D486-48F6-9736-D7E724EAB050",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-50:*:*:*:*:*:*:*",
"matchCriteriaId": "510C0364-48BE-4323-8718-003C1035469A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-50-\\/f:*:*:*:*:*:*:*",
"matchCriteriaId": "19BD796F-9F2E-4D94-B1CE-071F9AA42833",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-51:*:*:*:*:*:*:*",
"matchCriteriaId": "323DA13B-68B2-4A30-86B0-C7004727066B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06-51-\\/k:*:*:*:*:*:*:*",
"matchCriteriaId": "37FEA1D8-55FA-4310-924C-D55F86D3A212",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "301A7AAC-87FA-47D8-BC6C-3BA5BE6074EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-00:-:web:*:*:*:*:*",
"matchCriteriaId": "443F7724-C698-49C0-9155-90E33498ABDE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-00-\\/a:-:standard:*:*:*:*:*",
"matchCriteriaId": "F5FD09BB-65C0-450F-8ED4-EC190BC394AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-00-\\/a:-:web:*:*:*:*:*",
"matchCriteriaId": "7EA69680-A83C-4F74-9FE7-38540E33DE50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-01:-:standard:*:*:*:*:*",
"matchCriteriaId": "F7595F7A-E98D-4A43-956B-E74FBE411DA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-01:-:web:*:*:*:*:*",
"matchCriteriaId": "112A53D9-3AA9-40C9-8CAE-2DD06780049F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-01-\\/a:-:standard:*:*:*:*:*",
"matchCriteriaId": "BDA23B41-71A9-4D74-9FAC-DEF0970A7363",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04-01-\\/a:-:web:*:*:*:*:*",
"matchCriteriaId": "3C4FA663-6B02-4783-B9AD-84BD6AE77E64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:05-00:*:*:*:*:*:*:*",
"matchCriteriaId": "8F5E6285-F6D4-404F-A40B-CFE7ACAF1ACD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:05-00-\\/i:*:*:*:*:*:*:*",
"matchCriteriaId": "59AAEE4D-44AF-4DDE-BEF1-D47E601C9CAB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:05-01:*:*:*:*:*:*:*",
"matchCriteriaId": "C7F1C9A8-365F-4C1C-89D0-FC8AB8E7D04C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:05-01-\\/l:*:*:*:*:*:*:*",
"matchCriteriaId": "76DEB598-C597-40D4-968C-1C3CAC4C6033",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:05-05:*:*:*:*:*:*:*",
"matchCriteriaId": "D57F896D-ED64-4016-B8A3-7510D4E3C8DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:05-05-\\/p:*:*:*:*:*:*:*",
"matchCriteriaId": "D4D8D3EC-C36E-48EC-AD10-35ADEA2C6724",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "E53F3C94-4F4A-40AB-8243-DF04F21E3472",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-00:-:web:*:*:*:*:*",
"matchCriteriaId": "666053A9-93E5-4B82-8A83-617A681EBADB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-00-\\/a:-:standard:*:*:*:*:*",
"matchCriteriaId": "1F8F8F9B-B070-42E7-BED3-BEF0E336E1AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-00-\\/a:-:web:*:*:*:*:*",
"matchCriteriaId": "BC409477-AAAB-4C37-940C-E85FAC985DB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-01:-:standard:*:*:*:*:*",
"matchCriteriaId": "B581C6E0-BCAE-4C78-B606-B3EB2849F340",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-01:-:web:*:*:*:*:*",
"matchCriteriaId": "5BE09230-D671-4458-BF03-49BF6C39F894",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-01-\\/a:-:standard:*:*:*:*:*",
"matchCriteriaId": "CA94F3ED-4865-43B2-AFF8-EA5840144134",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04-01-\\/a:-:web:*:*:*:*:*",
"matchCriteriaId": "C156780D-5366-46B1-A612-A2876B44ABFD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:5:*:*:*:*:*:*:*",
"matchCriteriaId": "8DCC416B-382F-4684-B110-57CACA78E1E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05-00:*:*:*:*:*:*:*",
"matchCriteriaId": "F594C217-1841-4C23-90E5-672BA60CA09A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05-00-\\/i:*:*:*:*:*:*:*",
"matchCriteriaId": "4E409CB8-078E-40E0-B24C-5E2B772AAAC2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05-01:*:*:*:*:*:*:*",
"matchCriteriaId": "C2D8206F-2160-442B-8C1B-9FDE7D0C874F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05-01-\\/l:*:*:*:*:*:*:*",
"matchCriteriaId": "7FBCF653-FDD0-42F9-A80F-B11B9B22D6B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05-05:*:*:*:*:*:*:*",
"matchCriteriaId": "18F7B28C-FEAE-49D1-9F7B-B6E7AF0D9B46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05-05-\\/p:*:*:*:*:*:*:*",
"matchCriteriaId": "13C98A6D-061C-4C86-A84C-6D25290DF848",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:-:light:*:*:*:*:*",
"matchCriteriaId": "E87739C1-97A3-437C-A4EA-09C7283C48A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:-:pro:*:*:*:*:*",
"matchCriteriaId": "AA88C349-5414-4929-B4E9-7D873551DB71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:-:standard:*:*:*:*:*",
"matchCriteriaId": "3D78324A-27A8-429D-98C8-4D0076AE7CA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-00:-:light:*:*:*:*:*",
"matchCriteriaId": "F96B4184-A86E-424B-BA45-53DE568FDC53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-00:-:pro:*:*:*:*:*",
"matchCriteriaId": "A9CAC58E-3CDA-4125-84AD-E92B476BEC52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-00:-:standard:*:*:*:*:*",
"matchCriteriaId": "5ED2FACB-ED6E-4B33-A390-773496EE24F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-00-\\/i:-:light:*:*:*:*:*",
"matchCriteriaId": "8FBE2B05-AC7A-45BA-A630-5BE5DE106544",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-00-\\/i:-:pro:*:*:*:*:*",
"matchCriteriaId": "2F23BA73-4ADB-4206-B608-104544789F10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-00-\\/i:-:standard:*:*:*:*:*",
"matchCriteriaId": "5B09BFDF-3A07-450F-9FAE-A00BEF8FE8DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-02:-:light:*:*:*:*:*",
"matchCriteriaId": "7E991733-1255-408E-9D23-51C7425059A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-02:-:pro:*:*:*:*:*",
"matchCriteriaId": "6350A4C8-E0D8-4C09-A1E7-9AC7C173CD1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-02:-:standard:*:*:*:*:*",
"matchCriteriaId": "A580A86B-FCF4-419C-AB6E-1D4BF7054EB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-02-\\/g:-:light:*:*:*:*:*",
"matchCriteriaId": "0426907D-9D19-4B5C-B1DC-9F6D5C5621B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-02-\\/g:-:pro:*:*:*:*:*",
"matchCriteriaId": "4E9DE74C-00A3-4EA9-B2CE-1C3380FA339A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-02-\\/g:-:standard:*:*:*:*:*",
"matchCriteriaId": "39CF866E-6A3E-48F0-84C0-17FB84BA4DBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-50:-:light:*:*:*:*:*",
"matchCriteriaId": "3AFC3EC6-942E-4ADD-821E-7E1B1BFFC6FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-50:-:pro:*:*:*:*:*",
"matchCriteriaId": "D1A02186-3B99-4C82-9B56-2E089CBB3438",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-50:-:standard:*:*:*:*:*",
"matchCriteriaId": "340FAAE7-3764-4CE9-BE0E-A45B9BBD512E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-50-\\/f:-:light:*:*:*:*:*",
"matchCriteriaId": "306A7D9F-201F-4A5C-98D8-95B540F1F254",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-50-\\/f:-:pro:*:*:*:*:*",
"matchCriteriaId": "15E1773D-BE81-4D79-9738-1636EF28AA7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-50-\\/f:-:standard:*:*:*:*:*",
"matchCriteriaId": "B433BA98-6CBA-4086-96BF-B94E97508613",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-51:-:light:*:*:*:*:*",
"matchCriteriaId": "6749D1BA-3675-4AD3-B939-4571BA53502D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-51:-:pro:*:*:*:*:*",
"matchCriteriaId": "E8932483-A765-401B-8D8A-17A2E32ADC6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-51:-:standard:*:*:*:*:*",
"matchCriteriaId": "630EEB83-5816-49E6-B75D-9CB6B7B5C00F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-51-\\/k:-:light:*:*:*:*:*",
"matchCriteriaId": "FE5D27FC-2847-4F82-9899-E0AEE8085734",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-51-\\/k:-:pro:*:*:*:*:*",
"matchCriteriaId": "FD77FE62-6689-49A0-AE2D-7456ED95A971",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06-51-\\/k:-:standard:*:*:*:*:*",
"matchCriteriaId": "C8E6F824-7A39-49D0-B6E3-3C141AA9E287",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer\u0027s Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer en Hitachi Cosminexus V4 a la V8, Processing Kit para XML, y Developer\u0027s Kit para Java, usado en productos como uCosminexus, Electronic Form Workflow, Groupmax, e IBM XL C/C++ Enterprise Edition 7 y 8, permite a atacantes remotos tener un impacto desconocido a trav\u00e9s de vectores relacionados con el uso del procesamiento de im\u00e1genes GIF mediante APIs para aplicaciones Java. Cuesti\u00f3n distinta del CVE-2007-3794."
}
],
"id": "CVE-2009-4776",
"lastModified": "2024-11-21T01:10:25.607",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2010-04-21T14:30:00.553",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/57834"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36622"
},
{
"source": "cve@mitre.org",
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/36309"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/2574"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/57834"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/36622"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/36309"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2009/2574"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2007-11-05 17:46
Modified
2024-11-21 00:38
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4FD8C880-F11E-44A9-85F3-F0977D61C44D",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "649ED27D-43A3-45B6-B33E-3052C927ADA7",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_light_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C7773DA4-2ED1-46AA-95A2-422DC978838F",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_professional_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F74FD551-8D2D-4D3D-B1D5-4B0EF5640F6D",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_standard_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8A47159F-991A-447B-A5E1-C4ED4E52ADBC",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "22962B86-F12E-4290-B748-9FF12DE4A572",
"versionEndIncluding": "04_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_enterprise:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F4F061CA-E6D6-4E0C-9AA0-3FE18A499D95",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EF9B6262-4F8B-45DA-A153-E54423CD8B16",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_light:*:*:*:*:*:*:*:*",
"matchCriteriaId": "99EDC467-EAE5-4BD6-BAB7-944DF890A685",
"versionEndIncluding": "06_71_d",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_professional:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C9FE1C85-1D57-4ED3-94FA-BCBAF9A2BD53",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D5FC2D16-9EBB-4D18-AA2A-6C8D1788D60F",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*",
"matchCriteriaId": "52475B65-FCC2-418D-9842-BD6197367F5B",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*",
"matchCriteriaId": "67D3AEC5-63FA-4457-9EE4-CE5A2B55B687",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_00:*:hpux:*:*:*:*:*",
"matchCriteriaId": "1A0EB6CA-C6BF-4316-9C87-DC6177C54112",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_00:*:solaris:*:*:*:*:*",
"matchCriteriaId": "7839481D-92D1-4252-916B-D5BF0C817B1F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01:*:aix:*:*:*:*:*",
"matchCriteriaId": "DCBE68C6-A9FF-4783-A554-0F2E79B77D62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01:*:linux:*:*:*:*:*",
"matchCriteriaId": "BA1B4996-9789-4E7B-B89C-30719D4CEF0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01:*:turbolinux:*:*:*:*:*",
"matchCriteriaId": "ACDA910D-7CA8-4B21-9992-C766277598FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01_d:*:linux:*:*:*:*:*",
"matchCriteriaId": "916B1226-DB50-4C23-BFFE-B61983B20A1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_02_d:*:hpux:*:*:*:*:*",
"matchCriteriaId": "F6BC26AD-3B1F-449A-81C6-8C363620033E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_02_d:*:solaris:*:*:*:*:*",
"matchCriteriaId": "768DC203-A5EE-471F-8290-74877E0F2EBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_02_e:*:aix:*:*:*:*:*",
"matchCriteriaId": "2A316667-A7C3-48FD-8DDD-3A1B79D5695F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:aix:*:*:*:*:*",
"matchCriteriaId": "F0EB32A1-4032-4ECA-A02B-B2BC2A03E93C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:hpux:*:*:*:*:*",
"matchCriteriaId": "24BFFB81-904A-4C48-9015-2DCF9F7F4CAF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:linux:*:*:*:*:*",
"matchCriteriaId": "200A370A-FBCE-412C-B01A-5E79DE317134",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:solaris:*:*:*:*:*",
"matchCriteriaId": "EEDEA46C-003C-4A71-8BBC-4214B5D7C84C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:turbolinux:*:*:*:*:*",
"matchCriteriaId": "CA4D9A0F-21D2-45E8-BC90-BFABDCC1119C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:windows:*:*:*:*:*",
"matchCriteriaId": "62E9F68B-6A10-430F-BB15-DE9F354053BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00_a:*:linux:*:*:*:*:*",
"matchCriteriaId": "A2306B1F-810D-4188-BEE3-F49925B5BA8D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_02:*:hpux:*:*:*:*:*",
"matchCriteriaId": "D2AA434B-FCDE-4143-A4CA-85DC65F1351B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_02:*:hpux\\(ipf\\):*:*:*:*:*",
"matchCriteriaId": "498D35C5-D720-4540-87C1-6B5A89C9007F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_02:*:linux:*:*:*:*:*",
"matchCriteriaId": "5B8B0A25-B6D1-4CDF-A797-359C94DC8BC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:aix:*:*:*:*:*",
"matchCriteriaId": "4FBD5964-A65F-468E-98AF-6CBBF0EA6926",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux:*:*:*:*:*",
"matchCriteriaId": "F8C06DC9-FE19-4BEA-9FB8-F892C0668087",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux\\(ipf\\):*:*:*:*:*",
"matchCriteriaId": "1E64D786-872A-4FB8-ABE8-B6B0EA4AF34D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:solaris:*:*:*:*:*",
"matchCriteriaId": "4DAB1871-2653-4F96-A65F-F0FD7719BC8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:windows:*:*:*:*:*",
"matchCriteriaId": "86C196C5-C8EC-4037-A440-36DAF363DD92",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_06_a:*:linux:*:*:*:*:*",
"matchCriteriaId": "EBCA3085-482D-4F5A-8E27-FC68CCEF6617",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:aix:*:*:*:*:*",
"matchCriteriaId": "3F398CED-1BA2-475A-94A3-8E4E6C2C585C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:hpux\\(ipf\\):*:*:*:*:*",
"matchCriteriaId": "1B69F829-530D-4E51-98F0-CC3DD1109801",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:linux:*:*:*:*:*",
"matchCriteriaId": "BE03563A-F44C-4618-B9C7-0367213A966D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:windows:*:*:*:*:*",
"matchCriteriaId": "57D1E42B-8544-4F05-97E9-43F980F0F3BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00_01:*:solaris:*:*:*:*:*",
"matchCriteriaId": "F9466DD3-C33E-4C36-B527-2D709629BFBB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00_01:*:windows:*:*:*:*:*",
"matchCriteriaId": "FC35FB0E-0355-4F64-934B-CA2ECB0084B1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page."
},
{
"lang": "es",
"value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Hitachi Web Server 01-00 hasta 03-10, tal y como se usa en determinados productos Cosminexus, permite a atacantes remotos inyectar scripts web o HTML de su elecci\u00f3n mediante peticiones HTTP no especificadas que disparan la creaci\u00f3n de una p\u00e1gina estado-de-servidor."
}
],
"id": "CVE-2007-5809",
"lastModified": "2024-11-21T00:38:44.750",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2007-11-05T17:46:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/42027"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/27421"
},
{
"source": "cve@mitre.org",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/26271"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/42027"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/27421"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-035_e/index-e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/26271"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/3666"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2007-07-15 23:30
Modified
2024-11-21 00:34
Severity ?
Summary
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_h:*:*:*:*:*:*:*",
"matchCriteriaId": "08E9C3D3-D944-4F41-BF21-5DF582C43903",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_01_05_01_k:*:*:*:*:*:*:*",
"matchCriteriaId": "6C1CDB78-76C1-4D80-A183-7483FFA13A75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_00_o:*:*:*:*:*:*:*",
"matchCriteriaId": "80BE1B02-B165-42B6-9919-009B76C39B29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "2674A983-8739-4DBE-96ED-47677B8D2ADC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:standard:*:*:*:*:*",
"matchCriteriaId": "09A7C038-6DAE-4E96-817B-E53E922ECF2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "27C646E2-4008-4127-BA03-81B3F47778A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:standard:*:*:*:*:*",
"matchCriteriaId": "B048E417-AEFB-4E79-8D87-CA4DA9A9F6B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "9945A107-702F-408F-8E44-516C24726406",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:standard:*:*:*:*:*",
"matchCriteriaId": "02860F28-17E4-4367-A8DF-B132792E2B48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "32FF7671-F1EA-4BCA-8AA2-B833FC0E071D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:standard:*:*:*:*:*",
"matchCriteriaId": "28BFFA3A-2EAA-46D4-8F4A-9F665705764A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06_00_06_00_g:*:*:*:*:*:*:*",
"matchCriteriaId": "77F279FF-A73E-4DE4-BE75-DFB3304BE1EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06_02_06_02_f:*:*:*:*:*:*:*",
"matchCriteriaId": "FCA5094D-3C95-4518-BC90-30C44DFF40F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06_50_06_50_e:*:*:*:*:*:*:*",
"matchCriteriaId": "0A0E88A1-AEB5-48B3-82F9-A106A50D45BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_client:06_51_06_51_g:*:*:*:*:*:*:*",
"matchCriteriaId": "8E4B523C-BB7B-4538-8EC0-9906AC3DE97F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05_00_05_00_h:*:*:*:*:*:*:*",
"matchCriteriaId": "8FC69169-E960-46F4-BDFD-2042E01C1431",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05_01_05_01_k:*:*:*:*:*:*:*",
"matchCriteriaId": "64B60CE2-287E-412C-8AF9-8BA26BC797A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:05_05_05_05_o:*:*:*:*:*:*:*",
"matchCriteriaId": "F91CA5B9-A742-40C0-BF61-13BDA523436F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:light:*:*:*:*:*",
"matchCriteriaId": "546E37F4-CDFF-4970-927D-833CA154ED7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:professional:*:*:*:*:*",
"matchCriteriaId": "5D74159A-B4C0-40EA-8D4B-B507355F18D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:standard:*:*:*:*:*",
"matchCriteriaId": "FDF60BE0-7647-4032-81B4-0BB0EF96E064",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:light:*:*:*:*:*",
"matchCriteriaId": "9D937EA6-6D11-4B81-8F6E-F72A88A11443",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:professional:*:*:*:*:*",
"matchCriteriaId": "A67EA6AA-91D2-48EE-AED7-62167F3975BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:standard:*:*:*:*:*",
"matchCriteriaId": "54354B06-1E65-4944-9480-61CCBC530F26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:light:*:*:*:*:*",
"matchCriteriaId": "5A5AFF05-C190-416D-9095-9ECE2267108C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:professional:*:*:*:*:*",
"matchCriteriaId": "25D885D6-A31E-4A9D-8872-3E390492E64A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:standard:*:*:*:*:*",
"matchCriteriaId": "55E9DFAA-19EC-4997-A63B-ADDD6A7DD20F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:light:*:*:*:*:*",
"matchCriteriaId": "10EFBF89-DEE8-4502-A337-86440FF5C956",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:professional:*:*:*:*:*",
"matchCriteriaId": "7A0ABB33-3669-4864-881F-BD8CE9F8FFE8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:standard:*:*:*:*:*",
"matchCriteriaId": "460D3F3F-6154-400C-BD5C-0D6B86F8497C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:standard:*:*:*:*:*",
"matchCriteriaId": "C365F160-0EEA-4030-97B5-A42206B43ADC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:web:*:*:*:*:*",
"matchCriteriaId": "49CB5AA6-0C3C-4D08-B7C3-D322C081F400",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:standard:*:*:*:*:*",
"matchCriteriaId": "3434F1CB-6A3E-463C-B22C-6235102E8633",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:web:*:*:*:*:*",
"matchCriteriaId": "D85D9080-0E13-4F5D-A3EA-DC6FBBF33C41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:standard:*:*:*:*:*",
"matchCriteriaId": "04B32AEB-BC9D-4E57-9470-B2B56A17E7A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:web:*:*:*:*:*",
"matchCriteriaId": "F168FDE7-FB4D-4CC1-986D-F40258E791BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:standard:*:*:*:*:*",
"matchCriteriaId": "3C945B77-56CB-4B70-B661-2001DC72A51E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:web:*:*:*:*:*",
"matchCriteriaId": "3487C33D-B2D1-4A9C-B3C0-6467E6DD9383",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_studio:05_05_05_05_o:*:*:*:*:*:*:*",
"matchCriteriaId": "C211C0B8-452E-49E5-AF96-641D86751020",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "F3594EB6-0789-4DD9-93A6-F7CB6F9E525D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:standard:*:*:*:*:*",
"matchCriteriaId": "98F739B5-882B-45C2-9274-3BF1EB00B091",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "AE1C0314-2A44-4B05-9AF5-19B62198A624",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "1BE6CD20-5E43-4FB3-AEC6-BC2302BA0715",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "820349E6-7C6F-4822-BCEE-694E65DA6352",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "D9EE0379-D21E-498C-AE58-57DB5ED6214A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "0E8A70D0-E113-44FD-99C9-AD7960EF5AF3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:standard:*:*:*:*:*",
"matchCriteriaId": "4E871F4C-4720-46F3-B326-494755D61A1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:06_70_06_70_b:*:*:*:*:*:*:*",
"matchCriteriaId": "137EE7B2-CD0F-45E1-90BD-BDD56E32C810",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:06_71_06_71_b:*:*:*:*:*:*:*",
"matchCriteriaId": "FF0D4534-0C58-4AB5-B4F5-BE4077E3B569",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:07_00_07_20:*:*:*:*:*:*:*",
"matchCriteriaId": "7AE89A9A-0ED4-4D59-B38A-D61C69A391E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:light:*:*:*:*:*",
"matchCriteriaId": "8D01A20B-0EAE-46F8-8DB8-2F206062858B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:professional:*:*:*:*:*",
"matchCriteriaId": "472AABC0-2EFF-408B-B8E1-62AE64E88852",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "E4D4604F-F5D7-4F50-997E-3A4CAE8C5217",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:light:*:*:*:*:*",
"matchCriteriaId": "BA59A43B-8EF0-459E-A920-327373771869",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:professional:*:*:*:*:*",
"matchCriteriaId": "FA40F08E-0AB7-4235-A79C-7C21756BB718",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "1AAF93B0-88EA-48E0-81DF-24EBBD2AC4EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_operator:07_00_07_20:*:*:*:*:*:*:*",
"matchCriteriaId": "8ACE2D6C-AF0A-4DE0-819C-2E07478C19E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:07_00_07_20:*:*:*:*:*:*:*",
"matchCriteriaId": "95A20EFB-85F6-41E6-A603-73FE33942FD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_20:*:*:*:*:*:*:*",
"matchCriteriaId": "A5AA056B-5F4C-4161-8074-CA2E3FF80685",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_h:*:*:*:*:*:*:*",
"matchCriteriaId": "40658C3F-AE0F-45E2-92D6-BF082E9D66FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "A1B231A4-19B2-421F-BBBB-8CD053E23AC5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "62928248-B1B8-43AA-B552-9DDBDD5B618C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:*:*:*:*:*:*",
"matchCriteriaId": "49AFA829-1926-4521-B545-5F91E0C0D298",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:*:*:*:*:*:*",
"matchCriteriaId": "1C1204B2-BCF5-4E51-8698-2858BE9405BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "27C646E2-4008-4127-BA03-81B3F47778A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:standard:*:*:*:*:*",
"matchCriteriaId": "B048E417-AEFB-4E79-8D87-CA4DA9A9F6B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "3D547CE8-4C45-42C6-9A67-93098D96CBC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "5CFA3A0A-11A3-475B-AFD3-CD530D9D2588",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:*:*:*:*:*:*",
"matchCriteriaId": "64EE0884-1FCF-44E3-9DFD-D111ACBC6570",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:*:*:*:*:*:*",
"matchCriteriaId": "059233E9-DF7B-4239-BB7D-B99582493020",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "7E9AC5EE-0664-4AD4-9599-5378E42FC027",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "514E4C76-4B78-48B2-A216-69B429239B62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_c:*:*:*:*:*:*:*",
"matchCriteriaId": "4EC8984F-C604-4329-8240-05567D7B7AB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "AE1C0314-2A44-4B05-9AF5-19B62198A624",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "1BE6CD20-5E43-4FB3-AEC6-BC2302BA0715",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "820349E6-7C6F-4822-BCEE-694E65DA6352",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "D9EE0379-D21E-498C-AE58-57DB5ED6214A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "A0C00BC6-CE13-418E-9713-97AD173AF0C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:standard:*:*:*:*:*",
"matchCriteriaId": "DFECEA35-4AE8-490D-9BD7-66A41E3D01F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_10:*:*:*:*:*:*:*",
"matchCriteriaId": "515BB83C-588A-4BFC-A6C8-6CBF078E611A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*",
"matchCriteriaId": "61A4F116-1FEE-450E-99AE-6AD9ACDDE570",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_02_05_02_e:*:*:*:*:*:*:*",
"matchCriteriaId": "E3619039-6720-4285-9F75-9C011FE140C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_h:*:*:*:*:*:*:*",
"matchCriteriaId": "40658C3F-AE0F-45E2-92D6-BF082E9D66FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "E4AE4BE6-AE25-4DDE-8CA5-A82AB22C3A15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:standard:*:*:*:*:*",
"matchCriteriaId": "811CA6A6-3211-4B69-8BF6-BAC2E74D7674",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "2C4AFE01-77F7-4149-AE38-29443A5567E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:standard:*:*:*:*:*",
"matchCriteriaId": "4CE80569-E6BF-4771-80A6-AA3825E44FA8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_d:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "F560E009-EF13-4E6D-BEB3-E630E37910C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_d:*:standard:*:*:*:*:*",
"matchCriteriaId": "F1840F50-85F6-4F36-AE16-94A69E718A57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "9945A107-702F-408F-8E44-516C24726406",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:standard:*:*:*:*:*",
"matchCriteriaId": "02860F28-17E4-4367-A8DF-B132792E2B48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "AE1C0314-2A44-4B05-9AF5-19B62198A624",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:standard:*:*:*:*:*",
"matchCriteriaId": "1BE6CD20-5E43-4FB3-AEC6-BC2302BA0715",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_h:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "58E30CE3-9B4F-42CC-B937-5950DD982B81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_h:*:standard:*:*:*:*:*",
"matchCriteriaId": "6343B479-A127-4819-9CA0-C4E6285151F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_72:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "89F129C0-C5C2-4E8B-87B1-1B2127A1E7C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_72:*:standard:*:*:*:*:*",
"matchCriteriaId": "D5E5F2D1-2203-442F-AF4D-F0CCD097C909",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "A0C00BC6-CE13-418E-9713-97AD173AF0C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:standard:*:*:*:*:*",
"matchCriteriaId": "DFECEA35-4AE8-490D-9BD7-66A41E3D01F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_10:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "2DEA86DA-5FBF-4887-B390-A19EF6762888",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_10:*:standard:*:*:*:*:*",
"matchCriteriaId": "386462CA-6399-4654-9234-1967225E1F13",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_r:*:*:*:*:*:*:*",
"matchCriteriaId": "D597E295-C82C-4BD6-8E64-3A9AB34BCD7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_l:*:*:*:*:*:*:*",
"matchCriteriaId": "EC38AC44-24F4-4FC7-97EC-26A90864CB47",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "2674A983-8739-4DBE-96ED-47677B8D2ADC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:standard:*:*:*:*:*",
"matchCriteriaId": "09A7C038-6DAE-4E96-817B-E53E922ECF2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_f:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "E7225C21-1608-41F6-86F9-A322923B63B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_f:*:standard:*:*:*:*:*",
"matchCriteriaId": "54C5D716-B1BD-41D7-AB1D-66BD1021B5AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_d:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "62F8AE0B-D48B-49F2-BFAF-0AB917D86C23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_d:*:standard:*:*:*:*:*",
"matchCriteriaId": "8BA1AC51-20BB-4991-BF8F-38EF4987A731",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "A0C00BC6-CE13-418E-9713-97AD173AF0C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:standard:*:*:*:*:*",
"matchCriteriaId": "DFECEA35-4AE8-490D-9BD7-66A41E3D01F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:07_10:*:*:*:*:*:*:*",
"matchCriteriaId": "962CA2D1-F896-449C-9E21-27F6664D45C7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*",
"matchCriteriaId": "469B74F2-4B89-42B8-8638-731E92D463B9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_a:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "2F041769-C4B3-4E68-A728-C7A6B74C2BB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_a:*:standard:*:*:*:*:*",
"matchCriteriaId": "7D4765BC-9A06-4644-A254-9CC7124B8C1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "E4529373-2C7C-4946-84B4-91F5051C7C0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:standard:*:*:*:*:*",
"matchCriteriaId": "4EEF71A9-6F14-4CAD-A264-D0EE6F1CC041",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_c:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "2E29ADB4-8E77-44B7-8DAF-A6A056A58D8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_c:*:standard:*:*:*:*:*",
"matchCriteriaId": "938BC0D0-F52E-4979-990F-E1F7A02CFE41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "3DF2787E-6311-486A-A118-C032D742CD41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:07_00:*:standard:*:*:*:*:*",
"matchCriteriaId": "BEBAE442-D1DB-4D66-BBAF-CA89A4DD43D4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer\u0027s Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer en Hitachi Cosminexus V4 hasta V7, Processing Kit para XML versiones anteriores a 20070511, Developer\u0027s Kit para Java versiones anteriores a 20070312, y productos de terceras partes que utilizan este software, permite a atacantes remotos tener un impacto desconocido mediante im\u00e1genes GIF determinadas, relativas al uso de de APIs de procesamiento de im\u00e1genes GIF por una aplicaci\u00f3n JAVA."
}
],
"id": "CVE-2007-3794",
"lastModified": "2024-11-21T00:34:04.933",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2007-07-15T23:30:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/37851"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/26025"
},
{
"source": "cve@mitre.org",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/24905"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/2534"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/37851"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/26025"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/24905"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/2534"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2007-04-03 16:19
Modified
2024-11-21 00:29
Severity ?
Summary
Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to "unintended other requests."
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:aix:*:*:*:*:*",
"matchCriteriaId": "4EF7446C-6D20-4C78-88F0-C26EF18D29FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:hp-ux_ipf:*:*:*:*:*",
"matchCriteriaId": "46A428F7-481F-4CC9-BC88-F9E252145FC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:linux:*:*:*:*:*",
"matchCriteriaId": "B8113865-9748-4303-9EA0-A9877352289A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_00_11:*:windows:*:*:*:*:*",
"matchCriteriaId": "912A446F-14BA-4EBD-A602-CCEBFF61401A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:aix:*:*:*:*:*",
"matchCriteriaId": "CA22C63D-C179-424C-8D2F-61BB0EB7FED0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:hp-ux:*:*:*:*:*",
"matchCriteriaId": "2915E6E9-E1CB-4F41-93C8-64C2840A061E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:hp-ux_ipf:*:*:*:*:*",
"matchCriteriaId": "948B7479-CE14-48BC-992D-5D741A34250D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:linux:*:*:*:*:*",
"matchCriteriaId": "CA2C63CC-4A44-42C9-86A5-2C9B54D0FA12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:linux_ipf:*:*:*:*:*",
"matchCriteriaId": "1EBD3115-9F4E-4B33-9A40-E4BB43F6330A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_component_container:07_10_04:*:windows:*:*:*:*:*",
"matchCriteriaId": "7303B1B0-E108-4065-8DF4-9EB810A47066",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:developer_client_set:*:*:*:*:*",
"matchCriteriaId": "945C66CA-31DB-408D-BD4B-D023381F5DF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:professional_library_set:*:*:*:*:*",
"matchCriteriaId": "424670C5-82C6-44E0-A3C0-4391F254E6BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:standard_set:*:*:*:*:*",
"matchCriteriaId": "182C9BBE-DA39-412C-868A-CCDE7E4399CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "F374179A-7C0D-48B2-B0FF-39F5D4A7E37B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:standard:*:*:*:*:*",
"matchCriteriaId": "272AD10C-E135-4EEE-8F48-E28CF5F7B3D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:professional:*:*:*:*:*",
"matchCriteriaId": "03011EFF-6C5F-40F2-BF6D-FE4DE0E6F552",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:standard:*:*:*:*:*",
"matchCriteriaId": "415BE30B-0222-4C2F-9791-273469DB5BED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_erp_integrator:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6C963599-5B39-40A0-A834-E738164B3531",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*",
"matchCriteriaId": "354BD4CE-7B1A-4442-9F87-08CD70D9499E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*",
"matchCriteriaId": "72E63548-3AB3-4B78-AA2D-5B2AC7E06DD7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03, as used in uCosminexus Application Server Enterprise and Standard; uCosminexus Service Platform; uCosminexus Developer Standard and Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set, and Developer Client Set; and uCosminexus ERP Integrator, does not properly manage session information, which has an unspecified impact related to \"unintended other requests.\""
},
{
"lang": "es",
"value": "Vulnerabilidad sin especificar en el Hitachi Cosminexus Component Container 07-00 hasta la 07-00-10 y la 07-10 hasta la 07-10-03, como la utilizada en el uCosminexus Application Server Enterprise y Standard; uCosminexus Service Platform; uCosminexus Developer Standard y Professional; uCosminexus Service Architect; Electronic Form Workflow Standard Set, Professional Library Set y Developer Client Set y uCosminexus ERP Integrator, no maneja correctamente la informaci\u00f3n de la sesi\u00f3n lo que tiene un impacto sin especificar sobre \"otras peticiones no intencionadas\"."
}
],
"id": "CVE-2007-1854",
"lastModified": "2024-11-21T00:29:18.987",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2007-04-03T16:19:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/34768"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/24683"
},
{
"source": "cve@mitre.org",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/23213"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/1170"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33318"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/34768"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/24683"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-006_e/index-e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/23213"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/1170"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33318"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2007-01-26 00:28
Modified
2024-11-21 00:26
Severity ?
Summary
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "72EB5501-8682-47C6-A09B-64D628C319CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "336AC0E8-01DB-4D75-8F9F-E1673BE7883A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server_version_5:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5F49A94B-6343-4A24-8E8D-461192CD643A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_light_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CB9CE4D-B179-488A-881B-EDDE858DF8C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_professional_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "19698339-17FB-443A-A3A8-E6E364F6E892",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_standard_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "ED7AB561-DC97-4ACB-8810-B8020F28B769",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_version_5:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5976B0CF-D923-4D74-A599-028E20D14AF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_enterprise_edition:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C6DBFEFD-4667-4487-B009-F5133260D6A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_standard_edition:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7B3B8F3B-156B-44B0-97EF-F2DF622D8398",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_standard_edition_version_4:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7CC5DA2A-6880-491A-A2FD-327CF952E977",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_web_edition:*:*:*:*:*:*:*:*",
"matchCriteriaId": "394A48A2-C95B-4B1F-A571-77FFD1DA9F0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server_-_web_edition_version_4:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5BC015FD-6D1D-4A6C-A480-326614BEB5BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:hitachi_web_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B3721DE3-39EC-4C4A-B575-9F5CF2D21BE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_enterprise:*:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "0B00BB4D-1C8A-4CFE-9EA4-5CBE055276DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_smart_edition:*:*:*:*:*:*:*:*",
"matchCriteriaId": "980D0920-2D78-4EAF-8C99-C9928708C825",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "88B1B8FF-8362-471C-85DB-01D675764DF8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_light:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7148FC73-6087-4F89-8832-7888D3502E85",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4C937879-7AC4-4B36-BC3A-3C9B620A17F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*",
"matchCriteriaId": "354BD4CE-7B1A-4442-9F87-08CD70D9499E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*",
"matchCriteriaId": "72E63548-3AB3-4B78-AA2D-5B2AC7E06DD7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps."
},
{
"lang": "es",
"value": "M\u00faltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Hitachi Web Server, uCosminexus, y productos Cosminexus anteriores al 24/01/2007 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n mediante (1) cabeceras HTTP Expect o (2) im\u00e1genes de mapas."
}
],
"id": "CVE-2007-0514",
"lastModified": "2024-11-21T00:26:03.587",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2007-01-26T00:28:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/32997"
},
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/32998"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/23843"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/0326"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/32997"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/32998"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/23843"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/0326"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2007-08-01 16:17
Modified
2024-11-21 00:34
Severity ?
Summary
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "336AC0E8-01DB-4D75-8F9F-E1673BE7883A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server:6:*:standard:*:*:*:*:*",
"matchCriteriaId": "B2306ACE-7FC7-4B52-AAE8-436A606C5041",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_collaboration_portal:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DA4E08A2-D531-4DE2-B449-48B8AA11F365",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:*:light:*:*:*:*:*",
"matchCriteriaId": "44328F8D-C3B7-45CD-B01D-69328275C5A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:*:professional:*:*:*:*:*",
"matchCriteriaId": "43EFBD4E-DC14-4142-8128-B4261431E8FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer:6:*:standard:*:*:*:*:*",
"matchCriteriaId": "7A7BE1FF-7B19-4F3F-B02D-2AA27B38F088",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_erp_integrator:*:*:*:*:*:*:*:*",
"matchCriteriaId": "84DD23A3-EC26-4805-BCCC-9F6B1EED60D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_opentp1_web_front-end_set:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CACCCE63-723C-449B-9661-FCE9FA94DD65",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:developer_client_set:*:*:*:*:*",
"matchCriteriaId": "945C66CA-31DB-408D-BD4B-D023381F5DF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:professional_library_set:*:*:*:*:*",
"matchCriteriaId": "424670C5-82C6-44E0-A3C0-4391F254E6BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:electronic_form_workflow:*:*:standard_set:*:*:*:*:*",
"matchCriteriaId": "182C9BBE-DA39-412C-868A-CCDE7E4399CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:groupmax_collaboration_portal:*:*:server:*:*:*:*:*",
"matchCriteriaId": "3A8F4CE3-0710-4F68-B8C3-31B5F4E13BA8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:enterprise:*:*:*:*:*",
"matchCriteriaId": "F374179A-7C0D-48B2-B0FF-39F5D4A7E37B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server:*:*:standard:*:*:*:*:*",
"matchCriteriaId": "272AD10C-E135-4EEE-8F48-E28CF5F7B3D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_collaboration_portal:*:*:server:*:*:*:*:*",
"matchCriteriaId": "271FC231-03E1-4C99-B9F3-A8536503B71B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:light:*:*:*:*:*",
"matchCriteriaId": "8E2D80C1-773F-4C43-B990-2575782E619C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:professional:*:*:*:*:*",
"matchCriteriaId": "03011EFF-6C5F-40F2-BF6D-FE4DE0E6F552",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer:*:*:standard:*:*:*:*:*",
"matchCriteriaId": "415BE30B-0222-4C2F-9791-273469DB5BED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_erp_integrator:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6C963599-5B39-40A0-A834-E738164B3531",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_opentp1_web_front-end_set:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C564AA10-5286-4986-A580-61EC7A746352",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*",
"matchCriteriaId": "354BD4CE-7B1A-4442-9F87-08CD70D9499E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*",
"matchCriteriaId": "72E63548-3AB3-4B78-AA2D-5B2AC7E06DD7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user\u0027s session data, and possibly gain privileges."
},
{
"lang": "es",
"value": "La funci\u00f3n de recuperaci\u00f3n de sesi\u00f3n ante fallos en Cosminexus Component Container de Cosminexus 6, 6.7, y 7 anterior al 31/07/2007, como el usado en m\u00faltiples productos de Hitachi, puede utilizar informaci\u00f3n de la sesi\u00f3n para el usuario equivocado bajo ciertas condiciones no especificadas, lo cual podr\u00eda permitir a usuarios autenticados remotos obtener informaci\u00f3n sensible, corromper la informaci\u00f3n de sesi\u00f3n de otros usuarios, y posiblemente obtener privilegios."
}
],
"id": "CVE-2007-4124",
"lastModified": "2024-11-21T00:34:50.467",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 6.8,
"impactScore": 4.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2007-08-01T16:17:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/37852"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/26250"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/25145"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/2725"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35706"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/37852"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/26250"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/25145"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/2725"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35706"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2007-11-05 17:46
Modified
2024-11-21 00:38
Severity ?
Summary
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server_enterprise:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4FD8C880-F11E-44A9-85F3-F0977D61C44D",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_application_server_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "649ED27D-43A3-45B6-B33E-3052C927ADA7",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_light_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C7773DA4-2ED1-46AA-95A2-422DC978838F",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_professional_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F74FD551-8D2D-4D3D-B1D5-4B0EF5640F6D",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_developer_standard_version_6:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8A47159F-991A-447B-A5E1-C4ED4E52ADBC",
"versionEndIncluding": "06_51_j",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:cosminexus_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "22962B86-F12E-4290-B748-9FF12DE4A572",
"versionEndIncluding": "04_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_enterprise:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F4F061CA-E6D6-4E0C-9AA0-3FE18A499D95",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EF9B6262-4F8B-45DA-A153-E54423CD8B16",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_light:*:*:*:*:*:*:*:*",
"matchCriteriaId": "99EDC467-EAE5-4BD6-BAB7-944DF890A685",
"versionEndIncluding": "06_71_d",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_professional:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C9FE1C85-1D57-4ED3-94FA-BCBAF9A2BD53",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_standard:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D5FC2D16-9EBB-4D18-AA2A-6C8D1788D60F",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:*:*:*:*:*:*:*:*",
"matchCriteriaId": "52475B65-FCC2-418D-9842-BD6197367F5B",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:*:*:*:*:*:*:*:*",
"matchCriteriaId": "67D3AEC5-63FA-4457-9EE4-CE5A2B55B687",
"versionEndIncluding": "07_50_01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_00:*:hpux:*:*:*:*:*",
"matchCriteriaId": "1A0EB6CA-C6BF-4316-9C87-DC6177C54112",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_00:*:solaris:*:*:*:*:*",
"matchCriteriaId": "7839481D-92D1-4252-916B-D5BF0C817B1F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01:*:aix:*:*:*:*:*",
"matchCriteriaId": "DCBE68C6-A9FF-4783-A554-0F2E79B77D62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01:*:linux:*:*:*:*:*",
"matchCriteriaId": "BA1B4996-9789-4E7B-B89C-30719D4CEF0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01:*:turbolinux:*:*:*:*:*",
"matchCriteriaId": "ACDA910D-7CA8-4B21-9992-C766277598FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_01_d:*:linux:*:*:*:*:*",
"matchCriteriaId": "916B1226-DB50-4C23-BFFE-B61983B20A1D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_02_d:*:hpux:*:*:*:*:*",
"matchCriteriaId": "F6BC26AD-3B1F-449A-81C6-8C363620033E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_02_d:*:solaris:*:*:*:*:*",
"matchCriteriaId": "768DC203-A5EE-471F-8290-74877E0F2EBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:01_02_e:*:aix:*:*:*:*:*",
"matchCriteriaId": "2A316667-A7C3-48FD-8DDD-3A1B79D5695F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:aix:*:*:*:*:*",
"matchCriteriaId": "F0EB32A1-4032-4ECA-A02B-B2BC2A03E93C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:hpux:*:*:*:*:*",
"matchCriteriaId": "24BFFB81-904A-4C48-9015-2DCF9F7F4CAF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:linux:*:*:*:*:*",
"matchCriteriaId": "200A370A-FBCE-412C-B01A-5E79DE317134",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:solaris:*:*:*:*:*",
"matchCriteriaId": "EEDEA46C-003C-4A71-8BBC-4214B5D7C84C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:turbolinux:*:*:*:*:*",
"matchCriteriaId": "CA4D9A0F-21D2-45E8-BC90-BFABDCC1119C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00:*:windows:*:*:*:*:*",
"matchCriteriaId": "62E9F68B-6A10-430F-BB15-DE9F354053BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_00_a:*:linux:*:*:*:*:*",
"matchCriteriaId": "A2306B1F-810D-4188-BEE3-F49925B5BA8D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_02:*:hpux:*:*:*:*:*",
"matchCriteriaId": "D2AA434B-FCDE-4143-A4CA-85DC65F1351B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_02:*:hpux\\(ipf\\):*:*:*:*:*",
"matchCriteriaId": "498D35C5-D720-4540-87C1-6B5A89C9007F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_02:*:linux:*:*:*:*:*",
"matchCriteriaId": "5B8B0A25-B6D1-4CDF-A797-359C94DC8BC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:aix:*:*:*:*:*",
"matchCriteriaId": "4FBD5964-A65F-468E-98AF-6CBBF0EA6926",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux:*:*:*:*:*",
"matchCriteriaId": "F8C06DC9-FE19-4BEA-9FB8-F892C0668087",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:hpux\\(ipf\\):*:*:*:*:*",
"matchCriteriaId": "1E64D786-872A-4FB8-ABE8-B6B0EA4AF34D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:solaris:*:*:*:*:*",
"matchCriteriaId": "4DAB1871-2653-4F96-A65F-F0FD7719BC8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_04_b:*:windows:*:*:*:*:*",
"matchCriteriaId": "86C196C5-C8EC-4037-A440-36DAF363DD92",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:02_06_a:*:linux:*:*:*:*:*",
"matchCriteriaId": "EBCA3085-482D-4F5A-8E27-FC68CCEF6617",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:aix:*:*:*:*:*",
"matchCriteriaId": "3F398CED-1BA2-475A-94A3-8E4E6C2C585C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:hpux\\(ipf\\):*:*:*:*:*",
"matchCriteriaId": "1B69F829-530D-4E51-98F0-CC3DD1109801",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:linux:*:*:*:*:*",
"matchCriteriaId": "BE03563A-F44C-4618-B9C7-0367213A966D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00:*:windows:*:*:*:*:*",
"matchCriteriaId": "57D1E42B-8544-4F05-97E9-43F980F0F3BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00_01:*:solaris:*:*:*:*:*",
"matchCriteriaId": "F9466DD3-C33E-4C36-B527-2D709629BFBB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:web_server:03_00_01:*:windows:*:*:*:*:*",
"matchCriteriaId": "FC35FB0E-0355-4F64-934B-CA2ECB0084B1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature."
},
{
"lang": "es",
"value": "Hitachi Web Server 01-00 hasta 03-00-01, tal y como se usa en determinados productos Cosminexus, no valida apropiadamente certificados SSL cliente, lo cual podr\u00eda permitir a atacantes remotos suplantar autenticaci\u00f3n mediante un certificado cliente con una firma falsificada."
}
],
"id": "CVE-2007-5810",
"lastModified": "2024-11-21T00:38:44.890",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2007-11-05T17:46:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/42026"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/27421"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/26271"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/3666"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/42026"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/27421"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-034_e/index-e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/26271"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/3666"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2007-10-09 00:17
Modified
2024-11-21 00:37
Severity ?
Summary
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| hitachi | ucosminexus_application_server_enterprise | 07_50 | |
| hitachi | ucosminexus_application_server_standard | 7_50 | |
| hitachi | ucosminexus_client | 07_50 | |
| hitachi | ucosminexus_developer_professional | 07_50 | |
| hitachi | ucosminexus_developer_standard | 07_50 | |
| hitachi | ucosminexus_operator | 07_50 | |
| hitachi | ucosminexus_service_architect | 7_50 | |
| hitachi | ucosminexus_service_platform | 7_50 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_enterprise:07_50:*:*:*:*:*:*:*",
"matchCriteriaId": "C6E11EDF-8238-4AEB-A058-CED760CE9214",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_application_server_standard:7_50:*:*:*:*:*:*:*",
"matchCriteriaId": "1470F180-D3C4-406B-9CFA-924E7A5983E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_client:07_50:*:*:*:*:*:*:*",
"matchCriteriaId": "38B912C7-BD9D-49E5-8A01-62261CD59C34",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_professional:07_50:*:*:*:*:*:*:*",
"matchCriteriaId": "E183498D-EB6B-4E73-AEC5-189AE2E467E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_developer_standard:07_50:*:*:*:*:*:*:*",
"matchCriteriaId": "8E9DC904-9301-425C-B119-30DB6BD7F103",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_operator:07_50:*:*:*:*:*:*:*",
"matchCriteriaId": "0BA3A273-658B-4BB9-B09D-D3A78ED4C17D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_architect:7_50:*:*:*:*:*:*:*",
"matchCriteriaId": "02231524-3774-4438-986A-BB588AF87DF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:hitachi:ucosminexus_service_platform:7_50:*:*:*:*:*:*:*",
"matchCriteriaId": "20CBF96F-121C-4B44-9F15-DF8F49D1AC91",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer\u0027s Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698."
},
{
"lang": "es",
"value": "La extensi\u00f3n Java Secure Socket Extension (JSSE) en el Hitachi Cosminexus Developer\u0027s Kit para Java de varios productos Hitachi Cosminexus 7.5 anteriores a 07-50-01, cuando usan JSSE para el soporte SSL/TLS, permite a atacantes remotos provocar una denegaci\u00f3n de servicio mediante determinadas peticiones de negociaci\u00f3n SSL/TLS. NOTA: podr\u00eda ser la misma que CVE-2007-3698."
}
],
"id": "CVE-2007-5281",
"lastModified": "2024-11-21T00:37:33.823",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2007-10-09T00:17:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/27075"
},
{
"source": "cve@mitre.org",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/25935"
},
{
"source": "cve@mitre.org",
"url": "http://www.vupen.com/english/advisories/2007/3375"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36965"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/27075"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/25935"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/3375"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36965"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}