Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hitachi cosminexus developer 6 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2007-0514
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products prior to 20070124 allow remote malicious users to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps.
Hitachi Cosminexus Application ServerHitachi Cosminexus Server - Enterprise EditionHitachi Cosminexus Server - Standard EditionHitachi Ucosminexus Application Server StandardHitachi Ucosminexus Developer LightHitachi Cosminexus Developer Standard Version 6Hitachi Cosminexus Developer Version 5Hitachi Ucosminexus Application Server EnterpriseHitachi Ucosminexus Application Server Smart EditionHitachi Cosminexus Application Server 6Hitachi Cosminexus Application Server Version 5Hitachi Cosminexus Server - Standard Edition Version 4Hitachi Cosminexus Server - Web EditionHitachi Ucosminexus Developer StandardHitachi Ucosminexus Service ArchitectHitachi Ucosminexus Service PlatformHitachi Cosminexus Developer Light Version 6Hitachi Cosminexus Developer Professional Version 6Hitachi Cosminexus Server - Web Edition Version 4Hitachi Hitachi Web Server
5
CVSSv2
CVE-2007-5810
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote malicious users to spoof authentication via a client certificate with a forged signature.
Hitachi Web Server 01 00Hitachi Web Server 01 02 DHitachi Web Server 01 02 EHitachi Web Server 02 00 AHitachi Web Server 02 02Hitachi Web Server 02 06 AHitachi Web Server 03 00Hitachi Web Server 01 01Hitachi Web Server 02 00Hitachi Web Server 02 04 BHitachi Web Server 03 00 01Hitachi Cosminexus ServerHitachi Ucosminexus Application Server EnterpriseHitachi Cosminexus Application Server StandardHitachi Cosminexus Developer Light Version 6Hitachi Ucosminexus Developer ProfessionalHitachi Ucosminexus Developer StandardHitachi Cosminexus Developer Professional Version 6Hitachi Cosminexus Developer Standard Version 6Hitachi Ucosminexus Service ArchitectHitachi Ucosminexus Service PlatformHitachi Web Server 01 01 D
4.3
CVSSv2
CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote malicious users to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page.
Hitachi Web Server 01 01Hitachi Web Server 02 00Hitachi Web Server 02 02Hitachi Web Server 02 04 BHitachi Web Server 03 00Hitachi Cosminexus Developer Standard Version 6Hitachi Cosminexus ServerHitachi Ucosminexus Service PlatformHitachi Web Server 01 02 DHitachi Web Server 02 00 AHitachi Web Server 02 06 AHitachi Cosminexus Application Server EnterpriseHitachi Cosminexus Application Server StandardHitachi Ucosminexus Developer LightHitachi Ucosminexus Developer ProfessionalHitachi Web Server 01 01 DHitachi Web Server 03 00 01Hitachi Ucosminexus Application Server EnterpriseHitachi Ucosminexus Application Server StandardHitachi Web Server 01 00Hitachi Web Server 01 02 EHitachi Cosminexus Developer Light Version 6
4.9
CVSSv2
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 prior to 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensit...
Hitachi Cosminexus Collaboration PortalHitachi Cosminexus Developer 6Hitachi Electronic Form WorkflowHitachi Groupmax Collaboration PortalHitachi Ucosminexus Opentp1 Web Front-end SetHitachi Ucosminexus Service ArchitectHitachi Ucosminexus Application ServerHitachi Ucosminexus Collaboration PortalHitachi Ucosminexus Service PlatformHitachi Cosminexus Application Server 6Hitachi Ucosminexus DeveloperHitachi Ucosminexus Erp IntegratorHitachi Cosminexus Erp IntegratorHitachi Cosminexus Opentp1 Web Front-end Set
9.3
CVSSv2
CVE-2009-4776
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote malicious users to have an unkno...
Hitachi Ucosminexus Application Server 06-70-\\/eHitachi Ucosminexus Application Server 06-70-\\/fHitachi Ucosminexus Application Server 06-71-\\/gHitachi Ucosminexus Application Server 06-71Hitachi Ucosminexus Application Server 06-72-\\/dHitachi Ucosminexus Application Server 6.7Hitachi Ucosminexus Application Server 7Hitachi Ucosminexus Application Server 8Hitachi Ucosminexus Collaboration 06-35-\\/fHitachi Ucosminexus Collaboration 06-35Hitachi Ucosminexus Developer 06-70-\\/fHitachi Ucosminexus Developer 07-60Hitachi Ucosminexus Developer 08-00Hitachi Ucosminexus Developer 6.7Hitachi Ucosminexus Operator 7Hitachi Ucosminexus Operator 8Hitachi Ucosminexus Service Architect 07-00Hitachi Ucosminexus Service Architect 07-60Hitachi Ucosminexus Application Server 06-70-\\/nHitachi Ucosminexus Application Server 06-70Hitachi Ucosminexus Application Server 06-70fHitachi Ucosminexus Application Server 07-00
NA
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook